Let me explain my endgoal and maybe someone can point me in the right direction.
I would like to control SSL connections to my fileserver by “giving” users public keys for my server. If a user without my key trys to connect, even with the right password they would be rejected.
From what i do understand, it seems i get private and public keys from CA’s, so how do I get my selected users public keys for my file server?
Sounds like you need something like a client authentication system.
Where you keep a database of details from the clients certificates which you authenticate against.