Home / server / Questions / 482197
Accepted
0xC0000022L
Asked: 2013-02-26 02:42:07 +0800 CST

How to blacklist SSH public keys in OpenSSH?

  • 772

How can I configure OpenSSH (5.9) to reject a given set of public keys?

I know I can remove the keys from each respective .ssh/authorized_keys file, but I would like to do it on a server-wide basis. Imagine a scenario where a private key got compromised and I would like to prevent any user from putting the respective public key into their authorized_keys (yes, they should still be allowed to edit theirs) and it working. To achieve that I will need something that works at the system level.

ssh

1 Answers

  1. Best Answer

    Have a look into the RevokedKeys configuration option for the sshd. See man sshd_config.

    • 5