3 ms·
For those that are exploring software-based public certificate and OpenSSH, Ive broken down the settings for most PKI handlers. https://egbert.net/blog/article
by egberts1 2y ago
For those that are exploring software-based public certificate and OpenSSH, Ive broken down the settings for most PKI handlers.
https://egbert.net/blog/articles/openssh-file-authorized_keys.html https://egbert.net/blog/articles/openssh-file-authorized_key...
- memco 2y agoThanks for sharing this! I think I may now have what I need to set up a system with multi-user shared keys that only work for a given set of users.
- egberts 2y agoI do enjoy dual-PK-certificate authentication in my homelab: one by equipment, and one by user/group. Only misgiving is that the key management issues have worsen only for the key administrator(s). But it is a viable and sustainable AA model because there is the most important security component: instant denial of a user and/or a equupment.
- gosub100 2y agoWe must have knocked your site offline
- egberts1 2y agoUptime remains uninterrupted. Are you using the verboten Chrome and its inability to negotiate and defer to server absolut side of ChaCha20-Poly1305 with sha512? It refuses client-demanded Chrome-forced ChaCha/sha256, AES and then RSA.