summaryrefslogtreecommitdiff
path: root/data/templates/ssh
diff options
context:
space:
mode:
authorTakeru Hayasaka <hayatake396@gmail.com>2024-12-12 02:27:02 +0900
committerTakeru Hayasaka <hayatake396@gmail.com>2024-12-23 09:13:14 +0000
commite7cab89f9f81b2eeb456657d26dda8bd7d7fc428 (patch)
tree69054364573f7b86674c7b2899809fe10cf146dc /data/templates/ssh
parent3168305a0474573ad0f36fee399baa423cbce5e4 (diff)
downloadvyos-1x-e7cab89f9f81b2eeb456657d26dda8bd7d7fc428.tar.gz
vyos-1x-e7cab89f9f81b2eeb456657d26dda8bd7d7fc428.zip
T6013: Add support for configuring TrustedUserCAKeys in SSH service with local and remote CA keys
Diffstat (limited to 'data/templates/ssh')
-rw-r--r--data/templates/ssh/sshd_config.j24
1 files changed, 4 insertions, 0 deletions
diff --git a/data/templates/ssh/sshd_config.j2 b/data/templates/ssh/sshd_config.j2
index 2cf0494c4..7e44efae8 100644
--- a/data/templates/ssh/sshd_config.j2
+++ b/data/templates/ssh/sshd_config.j2
@@ -110,3 +110,7 @@ ClientAliveInterval {{ client_keepalive_interval }}
{% if rekey.data is vyos_defined %}
RekeyLimit {{ rekey.data }}M {{ rekey.time + 'M' if rekey.time is vyos_defined }}
{% endif %}
+
+{% if trusted_user_ca_key is vyos_defined %}
+TrustedUserCAKeys /etc/ssh/trusted_user_ca_key
+{% endif %}