Re:We updated our RSA SSH host key
by throw0101b on Friday March 24, 2023 @10:59AM
(#35289907)
> I can't find any OpenSSH documentation of either (server-side) PCKS#11/HSM support
OpenSSHd talks to an ssh-agent that then talks to the HSM:
> Identifies the UNIX-domain socket used to communicate with an agent that has access to the private host keys. If the string "SSH_AUTH_SOCK" is specified, the location of the socket will be read from the SSH_AUTH_SOCK environment variable.
OpenSSHd talks to an ssh-agent that then talks to the HSM:
> Identifies the UNIX-domain socket used to communicate with an agent that has access to the private host keys. If the string "SSH_AUTH_SOCK" is specified, the location of the socket will be read from the SSH_AUTH_SOCK environment variable.
* https://man.openbsd.org/sshd_config#HostKeyAgent