Hacker News Reader

I run a fleet of thousands of business devices running ssh. I used to have ssh configured to just ignore HostKey warnings but that always made me a little uneasy. Setting up an ssh CA and signing host keys was just a one-night project and it has made working with devices much more convenient and safe.

View on HN

Another really easy way to do this is to simply augment or replace your openssh daemon with Teleport. We just added a feature to master that handles CA rotation automatically for an entire fleet. Check it out on GitHub https://github.com/gravitational/teleport

A vote here for Teleport. Anyone doing any large scale management of SSH should take a good look at it.

Reply on news.ycombinator.com