First commit.

.gitignore

+~*
+*~
+*.swp
+*.swo

LICENSE.txt

+The MIT License (MIT)
+
+Copyright (c) [year] [fullname]
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

+.PHONY: install clean test
+
+install:
+	cp ssl-ca /usr/local/bin/ssh-ca
+	chmod 755 /usr/local/bin/ssh-ca
+
+clean:
+	echo Not implemented.
+
+test: clean
+	echo Not implemented.

README.rst

+SSH-CA
+######
+
+This utility assists in creating an SSH certificate authority. It aims to be
+production-ready and a secure solution for managing SSH key-pairs for both users
+and hosts.
+
+Installation
+------------
+::
+
+    git clone https://www.shore.co.il/cgit/ssh-ca
+    cd ssh-ca
+    sudo make install
+
+Usage
+-----
+
+To start a new certificate authority::
+
+    ssh-ca init
+
+To sign a user's public key::
+
+    ssh-ca signuser username.pub
+
+To sign a hosts's public key::
+
+    ssh-ca signhost hostname.pub
+
+To generate a new keypair for a host with a signed public key::
+
+    ssh-ca newhost host.domain.tld
+
+To resign all public keys (this will overwrite existing signed public keys)::
+
+    ssh-ca resign
+
+
+Deployment
+----------
+
+<placeholder>
+
+Development
+-----------
+
+To ease development ``make clean`` and ``make test`` are available. It's
+recommended to add ``make test`` to your git pre-commit hook.
+
+License
+-------
+
+This software is licnesed under the MIT licese (see the ``LICENSE.txt`` file).
+
+Author
+------
+
+Nimrod Adar, `contact me <nimrod@shore.co.il>`_ or visit my `website
+<https://www.shore.co.il/>`_. Patches are welcome via `git send-email
+<http://git-scm.com/book/en/v2/Git-Commands-Email>`_. The repository is located
+at: https://www.shore.co.il/cgit/.
+
+TODO
+----
+
+- Implement.
+- Testing.
+- Document deployment.

ssh-ca

+#!/bin/sh -e
+test $(which ssh-keygen) || \
+    (echo "Can't find ssh-keygen. Is OpenSSH installed properly?"; exit 1)
+
+usage () {
+    echo "Usage: $0 init|newuser|newhost"
+}
+
+init () {
+    echo Not implemented.
+}
+
+signuser () {
+    echo Not implemented.
+}
+
+signhost () {
+    echo Not implemented.
+}
+
+newhost () {
+    echo Not implemented.
+}
+
+if [ $# -lt 1 ]
+then
+    usage
+    exit 1
+fi
+
+case "$1" in
+    init)
+        init
+        ;;
+    signuser)
+        signuser "$2"
+        ;;
+    signhost)
+        signhost "$2"
+        ;;
+    newhost)
+        newhost "$2"
+        ;;
+    *)
+        usage
+        exit 1
+        ;;
+esac