ctg-ssh-ca (1.0.23)
Published 2026-11-06 08:46:15 -08:00 by CanuteTheGreat
Installation
sudo curl -o /etc/apt/keyrings/forgejo-CanuteTheGreat.asc
echo "deb [signed-by=/etc/apt/keyrings/forgejo-CanuteTheGreat.asc] $distribution $component" | sudo tee -a /etc/apt/sources.list.d/forgejo.list
sudo apt updateChoose $distribution and $component from the list below.
sudo apt install ctg-ssh-ca=1.0.23
Repository info
Distributions |
stable |
Components |
main |
Architectures |
all |
About this package
renew SSH host and user certificates with the owner's personal CA /usr/bin/ctg-ssh-ca (POSIX sh): install a host certificate (sshd HostCertificate drop-in, validated with sshd -t), renew host and user certificates by proof of possession against the signer on the tailnet, fetch the key revocation list, enroll a new device. A daily timer runs renew-all. Holds no keys and no fleet data: the CA public keys, signer address and host aliases come from the private ctg-ssh-ca-fleet package.
Dependencies
| openssh-client |
| curl |
Details
Assets (1)
Versions (23)
View all
ctg-ssh-ca_1.0.23_all.deb
10 KiB