How often should I rotate my SSH keys?

Re:How often should I rotate my SSH keys? by xyzzy_plugh on Friday February 26, 2021 @01:29AM (#26271895)

> ideally from a strong root of trust, like an IdP that does 2FA.

I understand the concepts, but how does this work in practice? Do you have an example of generating a short-expiry certificate from an IdP, such as Google?

[ Parent | on HN ]

Re:How often should I rotate my SSH keys? by ThePhysicist on Friday February 26, 2021 @04:12AM (#26272819)

You can do it directly with OpenSSH, no need for third-party software. There are many good blog articles / tutorials on the subject, e.g. search for "ssh ca certificate". Most people don't know that you can do this but it's actually quite easy.

[ Parent | on HN ]

Re:How often should I rotate my SSH keys? by vaylian on Friday February 26, 2021 @05:50AM (#26273468)

I did a bit of reading on the topic. But it is still unclear to me what the workflow is. How would a typical day look like for an admin and one of the users?

[ Parent | on HN ]

Re:How often should I rotate my SSH keys? by AlphaSite on Friday February 26, 2021 @01:39AM (#26271954)

Vault can do something like this.

[ Parent | on HN ]