Score:0

Sign windows-based SSH public key

gq flag

Does anybody successfully configured OpenSSH on Windows with CA signed host certificates? OpenSSH doesn't use this signed certificate in my case.

I tried:

  1. Sign generated by OpenSSH public certificate sing Hashicorp Vault.
  2. Issue certificate key pair with the same ssh engine in Vault.

In a both ways OpenSSH on Windows writes error: sshd: error: Public key for PROGRAMDATA/ssh/ssh_host_ed25519_key does not match private key.

ssh-keyscan from another host shows that Windows host returns short key which is not signed and dinamically generated based on private key

timsam avatar
gw flag
Hi seems you are not passing the pvt key, how are you trying to connect?
Andrei Andriushin avatar
gq flag
Hi! I don't need a private key to request public)
Score:0
gq flag

Signed public keys should be named with "cert" at the end. For example, ssh_host_ed25519_key-cert.pub. Unfortunately, it's not clearly described in openssh docs. You can find it in ssh-keysign manual: https://man.openbsd.org/ssh-keysign.8

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.