|
Hi, |
Replies: 1 comment
|
Proposed in PR #151. Admin → Settings → Global SSH host trust now includes an action-bound Step-up-protected import for exactly one independently verified OpenSSH |
|
Hi, |
|
Proposed in PR #151. Admin → Settings → Global SSH host trust now includes an action-bound Step-up-protected import for exactly one independently verified OpenSSH |
Proposed in PR #151. Admin → Settings → Global SSH host trust now includes an action-bound Step-up-protected import for exactly one independently verified OpenSSH
known_hostsentry. The server validates the host patterns and public key, rejects duplicates and conflicting keys, writes atomically, audits fingerprint metadata, and never returns raw key material in the API response. Existing removal remains available. The docs also call out thatssh-keyscanonly collects a candidate key and that its fingerprint must be verified out of band before import.