diff options
Diffstat (limited to 'index.mdwn')
| -rw-r--r-- | index.mdwn | 20 |
1 files changed, 16 insertions, 4 deletions
@@ -4,15 +4,27 @@ [[Blog]] — [[License]] -sshca is a tool for managing an [SSH CA][]. +The `sshca` tool helps manage an SSH Certificate Authority ([SSH CA][]) and +create host and user certificates. Such certificates make using and +administering SSH less tedious and more secure. -This website will be filled out later. +An SSH CA is an SSH key dedicated to signing, or certifying, other SSH +keys. Such a signed key is called a certificate and is used together +with the private part of the certified key. The certificate is used +instead of the public key. + +SSH clients and servers can be configured to trust certificates made +by one or more CA keys. This makes it possible for a client to trust a +server without asking the user to accept the host key for each new +server. A server can trust a client without having the client's public +key configured for that user in the `authorized_key` file. This +simplifies overall key management significantly, but requires creating +and managing CA keys and certificates. [SSH CA]: https://liw.fi/sshca # News <div class="newslist"> -[[!inline pages="page(blog/*)" - limit=5 template=titlepage archive=yes trail=no feeds=no]] +[[!inline pages="page(blog/*)" limit=5 archive=yes trail=no feeds=no]] </div> |