I hereby claim:
- I am joshua-in-boots on github.
- I am zosh (https://keybase.io/zosh) on keybase.
- I have a public key ASBlUDzukQQHrfkE0-4Rlkrg9rjdFYepPVIpybnqcBxBaAo
To claim this, I am signing this object:
I hereby claim:
To claim this, I am signing this object:
In this scenario we are going to set up Vault to sign SSH keys using an internal CA. We will configure the SSH secrets engine and create a CA within Vault. We will then configure an SSH server to trust the CA key we just created. Finally we will attempt to SSH using a private key, and a public key signed by Vault SSH CA.
#!/bin/bash | |
# Default login ID of VM Instance. | |
# https://docs.aws.amazon.com/ko_kr/AWSEC2/latest/UserGuide/managing-users.html | |
OLD_ID=ubuntu | |
# Name a new ID at your taste | |
NEW_ID=joshua | |
NEW_HOME=/home/$NEW_ID | |
AUTH_KEY=$USER_HOME/.ssh/authorized_keys |