nornir-auth-sshsig

Per-call SSH-signature (SSHSIG) credentials for gRPC control planes, product-neutral: the credential a caller signs with its own OpenSSH key (method-bound, single-use, time-boxed), the one verifier, and the replay guard. Each product names its own metadata key, scheme token and sshsig namespace, so a credential for one product never verifies at another. Moved out of gunnar-grpc (its wire format unchanged) so monetize's control API checks callers the same way.

View on Cargo

Activity

Latest release: 4d ago
Total releases: 2
Cadence: ~16 days
Last 12 months: 2

Reach

Downloads: 47

Details

License: MIT OR Apache-2.0
First release: Oct 09, 2026

Releases

Version	Released
`0.1.1` patch	Oct 25, 2026
`0.1.0` initial	Oct 09, 2026

Dependencies (3)

Depends on

0.1.1

Used by

Supply-chain exposure

2 tracked projects depend on this, <1% of every package we track.

Vulnerable dependencies

1 of 3

rand_core critical 1 CVE

These dependencies are still vulnerable in their latest release. Whether the exact version this package pins is affected isn't checked yet.

Insights

Releases per month

last 12 months

Release mix

patch 1

2 releases

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More