summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobert Göhler <github@ghlr.de>2024-12-23 16:56:55 +0100
committerGitHub <noreply@github.com>2024-12-23 16:56:55 +0100
commit87b6bf9822c57210dfd687b480240c067af6572a (patch)
treea9410fd212e35cb80f09d72b0be8ad60dd5eb98c
parent347c7175f694711232a8f8bc390522100c3253ba (diff)
parent27c325b7439381bf3df05bfeaa0c2f7bd9847acc (diff)
downloadvyos-documentation-87b6bf9822c57210dfd687b480240c067af6572a.tar.gz
vyos-documentation-87b6bf9822c57210dfd687b480240c067af6572a.zip
Merge pull request #1578 from takehaya/T6013-trusted-ca-keys
-rw-r--r--docs/configuration/service/ssh.rst6
1 files changed, 6 insertions, 0 deletions
diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst
index e7642433..17e6c6df 100644
--- a/docs/configuration/service/ssh.rst
+++ b/docs/configuration/service/ssh.rst
@@ -129,6 +129,12 @@ Configuration
``rsa-sha2-256-cert-v01@openssh.com``, ``rsa-sha2-512``,
``rsa-sha2-512-cert-v01@openssh.com``
+.. cfgcmd::set service ssh trusted-user-ca-key ca-certificate <ca_cert_name>
+
+ Specify the name of the CA certificate that will be used to verify the user
+ certificates.
+ You can use it by adding the CA certificate with the PKI command.
+
Dynamic-protection
==================
Protects host from brute-force attacks against