Latest / Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering
Linux Server SSH Certificate Authority for Key Management
Episode 125 of Linux Server Admin with Fexingo dives into SSH certificate authority (SSH CA) as a modern alternative to managing thousands of authorized_keys files. Lucas and Luna walk through the practical setup: creating a CA key pair, signing host and user certificates, and configuring sshd to trust the CA. They discuss why Netflix and other large orgs adopted SSH CA to eliminate key sprawl and simplify onboarding/offboarding. Specific commands like ssh-keygen, ssh-keygen -s, and TrustedUserCAKeys are covered. The episode also touches on certificate expiry as a security boundary and…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.