Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Multiple SSH CA Certificates #3

Closed
jasonrogena opened this issue Oct 4, 2019 · 0 comments · Fixed by #5
Closed

Multiple SSH CA Certificates #3

jasonrogena opened this issue Oct 4, 2019 · 0 comments · Fixed by #5
Assignees
@jasonrogena

Comments

@jasonrogena
Copy link
Contributor

Seems the TrustedUserCAKeys variable in /etc/ssh/sshd_config only supports being declared once. Therefore, currently, if more than one CA certificate is to be configured, only the first CA certificate is loaded.

Fix is to place all the CA certificates in a single file then point TrustedUserCAKeys to this file.
@jasonrogena jasonrogena self-assigned this Oct 7, 2019
jasonrogena added a commit that referenced this issue Nov 25, 2019
@jasonrogena
Fix multiple SSH certificates issue
fc06eac 
Fix the issue causing just the first CA certificate allowed to access
a host to work. Fix meant putting all the CA certificates in one file
and linking a TrustedUserCAKeys variable in the sshd_config file
to this combined file.

Fixes #3

Signed-off-by: Jason Rogena <jason@rogena.me>
@jasonrogena jasonrogena mentioned this issue Nov 25, 2019
Merged
jasonrogena added a commit that referenced this issue Nov 25, 2019
@jasonrogena
Fix multiple SSH certificates issue
aaf9ea5 
Fix the issue causing just the first CA certificate allowed to access
a host to work. Fix meant putting all the CA certificates in one file
and linking a TrustedUserCAKeys variable in the sshd_config file
to this combined file.

Fixes #3

Signed-off-by: Jason Rogena <jason@rogena.me>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jasonrogena jasonrogena

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fixes Multiple SSH Certificates Issue onaio/ansible-ssh
1 participant
@jasonrogena