Table of Contents

Class SshCertificate

Namespace
SshSharp
Assembly
SshSharp.dll

An OpenSSH certificate (PROTOCOL.certkeys): a public key signed by a certificate authority, limited to some principals, a validity window, and options. Presented by servers as host keys and used by clients for public-key authentication.

public sealed class SshCertificate
Inheritance
SshCertificate
Inherited Members

Properties

Algorithm

The certificate's type name, for example ssh-ed25519-cert-v01@openssh.com.

AuthorityFingerprint

The certificate authority's SHA-256 fingerprint.

AuthorityKey

The certificate authority's public key, in SSH wire format (what @cert-authority lines hold).

Blob

The certificate in SSH wire format.

CriticalOptions

Critical options (for example force-command, source-address); a verifier must refuse ones it does not understand.

Extensions

Extensions (for example permit-pty).

Fingerprint

The certified key's SHA-256 fingerprint.

KeyId

The key identifier the authority chose (it appears in server logs).

KeyType

The certified key's type, for example ssh-ed25519.

Principals

The user or host names the certificate is valid for; empty means any.

PublicKey

The certified public key, in SSH wire format.

Serial

The serial number the authority gave the certificate.

Type

Whether this certifies a user or a host.

ValidAfter

The start of the validity window.

ValidBefore

The end of the validity window (MaxValue for "forever").

Methods

Parse(string)

Parses a certificate from an OpenSSH -cert.pub file's contents (type base64 [comment]).