News for hackers. Stuff that matters.

A comment on Ask HN: How do you manage SSH keys and SSL certificates in your company?. Parent comment

Re:Ask HN: How do you manage SSH keys and SSL certificates i... by Spivak on Friday May 12, 2017 @08:37AM (#14323423)
There are two states that we're talking about.

* Ensure that the following key is present.

* Ensure that only the following keys are present.

You can accomplish the second one with the 'exclusive' flag.

http://docs.ansible.com/ansible/authorized_key_module.html

[ Parent | on HN ]
Re:Ask HN: How do you manage SSH keys and SSL certificates i... by falcolas on Friday May 12, 2017 @09:08AM (#14323633)
There's a third state as well: absent. Move keys from one file to another, and they go from allowed to denyed.

That said, I do like the "exclusive" tag too, I just tend to have a few one-off keys laying around as technical debt.

[ Parent | on HN ]