From fcd8540678f3619880438c95691ba32d1320873a Mon Sep 17 00:00:00 2001 From: Lars Wirzenius Date: Fri, 27 Aug 2021 09:08:42 +0300 Subject: add some description of sshca tto the front page Sponsored-by: author --- index.mdwn | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/index.mdwn b/index.mdwn index 006e2b4..487bf08 100644 --- a/index.mdwn +++ b/index.mdwn @@ -4,9 +4,22 @@ [[Blog]] — [[License]] -sshca is a tool for managing an [SSH CA][]. +The `sshca` tool helps manage an SSH Certificate Authority ([SSH CA][]) and +create host and user certificates. Such certificates make using and +administering SSH less tedious and more secure. -This website will be filled out later. +An SSH CA is an SSH key dedicated to signing, or certifying, other SSH +keys. Such a signed key is called a certificate and is used together +with the private part of the certified key. The certificate is used +instead of the public key. + +SSH clients and servers can be configured to trust certificates made +by one or more CA keys. This makes it possible for a client to trust a +server without asking the user to accept the host key for each new +server. A server can trust a client without having the client's public +key configured for that user in the `authorized_key` file. This +simplifies overall key management significantly, but requires creating +and managing CA keys and certificates. [SSH CA]: https://liw.fi/sshca -- cgit v1.2.1