3 ms·
Certificate authentication is overkill and rolling it yourself is painful enough that huge companies have been built around it (Teleport). Unless you're an ente
by computerfriend 4y ago
Certificate authentication is overkill and rolling it yourself is painful enough that huge companies have been built around it (Teleport). Unless you're an enterprise SSHer with tons of ephemeral hosts, use public keys instead.
- dewey 4y agoI'd guess they just talk about pub key authentication?
- Macha 4y agoI mean, it sounds like in OP's case it's 1 service instance to small N (maybe even 1) potential systems to deploy from. Manual SSH public key deployment doesn't scale to corporate scale, but it certainly scales that far
- radiator 4y agoIt does not look so painful. I have found this guide helpful [https://jameshfisher.com/2018/03/16/how-to-create-an-ssh-certificate-authority/ https://jameshfisher.com/2018/03/16/how-to-create-an-ssh-cer...]
- client4 4y agoCA isn't terribly difficult. https://keybase.io/blog/keybase-ssh-ca https://keybase.io/blog/keybase-ssh-ca