Forum Discussion

Anonymous's avatar
Anonymous
2 years ago

op-ssh-sign

Hello, Can op-ssh-sign be open sourced? This would be useful because just op-ssh-sign can then be ported to other architectures, and can work in symphony with 1pw on the desktop, via IdentityAge...
SSH
Anonymous's avatar
Anonymous
2 years ago

Hi floris_1P, the arch in question is s390x - IBM mainframe :)

So, if I use IdentityAgent or SSH_AUTH_SOCK on my workstation's SSH config, then ssh-keygen on s390x will be able to use 1pw on the workstation to look up the keys?
I already use IdentityAgent on the host with agent forwarding, so git push on s390x triggers the auth prompt on the host's 1pw.

At the moment, newer OpenSSH that supports SSH for commit signing is not ready for zOS yet (https://github.com/zosopentools/opensshport). zOS is a mainframe operating system.

EDIT: Is there any chance at all of using GPG signing workflow on s390x, but then it co-ordinates with GPG keys within 1pw, via the host's agent?

In general, I'm looking to get as much of the cool stuff to support IBM Z as well.
So, 1pw CLI for example, or op-ssh-sign supporting Z will be great.
Perhaps a skimmed-down version of libs that are easy to port, but can work well with 1pw on the host.