cloudtools/ssh-ca — pull request #7 by synfinatic (2014-08-05 18:09:02+00:00)
Title: Support future certs & keeping certs in S3 until they expire

Four major changes:
* certs uploaded to S3 now expire when the cert expires
* Added an option to issue certs to be active in the future (--starts-in)
* Workaround ssh-keygen bug which incorrectly handles DST with the YYYYMMDDHHMMSS format
* Write audit log valid_for in YYYYMMDDHHMMSS:YYYYMMDDHHMMSS format rather then just whatever the user specifies on the CLI