altinea
/
install-scripts
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Browse Source

Small bugfixes

pull/1/head
Julien Escario 4 years ago
parent
e7c2f86cb1
commit
177215003f
1 changed files with 5 additions and 5 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 10
      ssh/yubibug.md

10
ssh/yubibug.md
View File

@ -83,8 +83,8 @@ Your selection? <b>2</b>
Please select which elliptic curve you want: Please select which elliptic curve you want:
(1) Curve 25519 (1) Curve 25519
(4) NIST P-384 (4) NIST P-384
Your selection? <b>1</b>
The card will now be re-configured to generate a key of type: ed25519
Your selection? <b>1</b>
The card will now be re-configured to generate a key of type: ed25519
gpg/card> <b>generate</b> gpg/card> <b>generate</b>
Make off-card backup of encryption key? (Y/n) n Make off-card backup of encryption key? (Y/n) n
@ -95,7 +95,7 @@ You should change them using the command --change-pin
Please specify how long the key should be valid. Please specify how long the key should be valid.
0 = key does not expire 0 = key does not expire
<n> = key expires in n days
`<n>` = key expires in n days
<n>w = key expires in n weeks <n>w = key expires in n weeks
<n>m = key expires in n months <n>m = key expires in n months
<n>y = key expires in n years <n>y = key expires in n years
@ -189,8 +189,8 @@ $ <b>ssh-keygen -Lf .ssh/id_ed25519-cert.pub</b>
At this point, you have to copy the CA's public key into your server's authorized_keys file . This can't be done with ssh-copy-id as the CA's key is not loaded into you ssh-agent nor available in the ~/.ssh directory. At this point, you have to copy the CA's public key into your server's authorized_keys file . This can't be done with ssh-copy-id as the CA's key is not loaded into you ssh-agent nor available in the ~/.ssh directory.
You should have something like : You should have something like :
<pre> <pre>
server:~# <b>cat .ssh/authorized_keys</b>
cert-authority ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICAL7l1sQuKe4daLfKGZuiRPZZXquokQyH+p6utlZxZ+ Test CA
server:~# <b>cat .ssh/authorized_keys</b>
cert-authority ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICAL7l1sQuKe4daLfKGZuiRPZZXquokQyH+p6utlZxZ+ Test CA
</pre> </pre>
Note the line beginning with cert-authority which is not common. For reference, read "AUTHORIZED_KEYS FILE FORMAT" chapter here : [http://man.he.net/man5/authorized_keys](http://man.he.net/man5/authorized_keys) Note the line beginning with cert-authority which is not common. For reference, read "AUTHORIZED_KEYS FILE FORMAT" chapter here : [http://man.he.net/man5/authorized_keys](http://man.he.net/man5/authorized_keys)

Write Preview
Loading…
Cancel
Save