Skip to content

Commit

Permalink
Add algo signer to support openssl as of recent
Browse files Browse the repository at this point in the history
"algorithm_signer": "rsa-sha2-256"
to prevent /var/log/auth.log `userauth_pubkey: certificate signature algorithm ssh-rsa: signature algorithm not supported [preauth]` due to vault defaulting to ssh-rsa which is insecure
  • Loading branch information
mikegreen authored Aug 25, 2021
1 parent 4a91923 commit e46313b
Showing 1 changed file with 1 addition and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -106,6 +106,7 @@ team, or configuration management tooling.
```text
$ vault write ssh-client-signer/roles/my-role -<<"EOH"
{
"algorithm_signer": "rsa-sha2-256",
"allow_user_certificates": true,
"allowed_users": "*",
"allowed_extensions": "permit-pty,permit-port-forwarding",
Expand Down

0 comments on commit e46313b

Please sign in to comment.