You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
Markus Bergholz a2d6ce2df0 add test files 9 months ago
..
README.md first commit 2 years ago
main.yml add test files 9 months ago

README.md

ssh

  1. allow login with signed public key (no pub key need to be transfer to the server)
  2. login with password and oath-hotp

yubi key setup

  1. generate secret
  • dd if=/dev/random bs=1k count=1 | sha1sum
  1. flash yubi key slot 2 with generated secret
  • ykpersonalize -2 -o oath-hotp -o oath-hotp8 -o append-cr -a <SECRET>

sign ssh key

Generate a new ssh key with password.
Sign your public key with the private key. The cert pub key will be valid for one week.

ssh-keygen -s ~/.ssh/<your new private key> -I <my host> -n <my user> -V +1w ~/.ssh/<your default pub key>