ctg-ssh-ca (1.0.13)

Published 2026-11-04 20:27:22 -08:00 by CanuteTheGreat

Installation

sudo curl  -o /etc/apt/keyrings/forgejo-CanuteTheGreat.asc
echo "deb [signed-by=/etc/apt/keyrings/forgejo-CanuteTheGreat.asc]  $distribution $component" | sudo tee -a /etc/apt/sources.list.d/forgejo.list
sudo apt update

Choose $distribution and $component from the list below.

sudo apt install ctg-ssh-ca=1.0.13

Repository info

Distributions
stable
Components
main
Architectures
all

About this package

renew SSH host and user certificates with the owner's personal CA /usr/bin/ctg-ssh-ca (POSIX sh): install a host certificate (sshd HostCertificate drop-in, validated with sshd -t), renew host and user certificates by proof of possession against the signer on the tailnet, fetch the key revocation list, enroll a new device. A daily timer runs renew-all. Holds no keys and no fleet data: the CA public keys, signer address and host aliases come from the private ctg-ssh-ca-fleet package.

Dependencies

openssh-client
curl
Details
Debian
2026-11-04 20:27:22 -08:00
1
2026-11-04 20:34:48 -08:00
Ronald Farrer
7.1 KiB
Assets (1)
Versions (23) View all
1.0.34 2026-11-09
1.0.33 2026-11-09
1.0.32 2026-11-09
1.0.31 2026-11-08
1.0.30 2026-11-07