# OpenSSH Published articles for OpenSSH. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Security updates for Wednesday DevFeed: [Security updates for Wednesday]() Original publisher: [Read original article]() Author: corbet Published: 2026-09-16T13:40:53Z Content type: news Language: en Sources: [LWN.net]() Topics: [Security](), [Linux](), [nginx](), [openssl](), [Python](), [OpenSSH]() Tags: [debian](), [linux](), [nginx](), [openssh](), [openssl](), [python](), [security](), [updates]() ### AI overview Security updates were issued by AlmaLinux, Debian, Fedora, Oracle, Red Hat, SUSE, and Ubuntu for packages including kernels, nginx, OpenSSL, Python, Perl, Git, Docker, OpenSSH, and other software. ### Source excerpt Security updates have been issued by AlmaLinux (kernel, kernel-rt, libkcapi, nginx, nginx:1.24, openssl, osbuild-composer, perl, perl:5.32, python-tornado, rsync, and rust), Debian (cjose and nginx), Fedora (environment-modules, erlang, GitPython, knot, perl-Authen-SASL, python-configargparse, ruby, rubygems, and sblim-sfcb), Oracle (firefox, git-lfs, gstreamer1-plugins-base, kernel, libkcapi, nginx, nginx:1.26, openssl, osbuild-composer, perl, perl-YAML-Syck, postgresql18, python-tornado, and rust), Red Hat (fence-agents, git-lfs, microcode_ctl, osbuild-composer, podman, python-pyasn1, and resource-agents), SUSE (389-ds, ant, bson-devel, chirp-20260911, docker, gimp, google-cloud-sap-agent, hauler, kernel, kimi-code, libpcap, python-GitPython, python310, syncthing, yast2-samba-client, and zstd-jni), and Ubuntu (aom, imagemagick, kitty, openssh, phpseclib, policykit-1, python-sql, python-webob, shibboleth-sp, simplesamlphp, snapcast, srt, and suricata-update). ## How to Run Codex in an Ubuntu Virtual Machine on Proxmox DevFeed: [How to Run Codex in an Ubuntu Virtual Machine on Proxmox]() Original publisher: [Read original article]() Author: Travis Henderson Published: 2026-09-15T12:00:11Z Content type: tutorial Language: en Sources: [Atomic Object]() Topics: [AI-assisted coding](), [codex](), [Linux](), [Ubuntu](), [Proxmox](), [OpenSSH](), [Authorization]() Tags: [ai-agent](), [ai-for-developers](), [codex](), [coding-agents](), [development](), [linux](), [openssh](), [permissions](), [proxmox](), [sandbox](), [ubuntu]() ### AI overview This guide explains how to isolate Codex in a headless Ubuntu virtual machine running on Proxmox, using a separate Linux account and OpenSSH. The setup limits the files, dependencies, and network access available to the agent while keeping administrator tasks separate, but it does not eliminate risks from credentials, network access, or mistakes pushed to GitHub. ### Source excerpt The more useful coding agents become, the more access they tend to need. Installing dependencies, running commands, changing files, and generally more autonomy are part of the appeal. They're also the point where I start thinking about what else the coding agent can reach, especially while these tools are changing so quickly. My answer is [...] The post Your Coding Agent Should be in Jail. Here's Why and How. appeared first on Atomic Spin. ## Microsoft's September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880) DevFeed: [Microsoft's September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)]() Original publisher: [Read original article]() Author: Research Special Operations Published: 2026-09-08T18:07:55Z Content type: news Language: en Sources: [Tenable Blog]() Topics: [Microsoft](), [cve-2026-85880](), [.NET](), [ASP.NET](), [GitHub Copilot](), [Visual Studio Code](), [OpenSSH]() Tags: [asp-net-core](), [cve-2026-81963](), [cve-2026-85880](), [github-copilot](), [microsoft](), [net](), [openssh](), [patch-tuesday](), [security](), [september-2026](), [update](), [updates](), [visual-studio](), [windows]() ### AI overview Microsoft's September 2026 Patch Tuesday release addresses 964 CVEs, including two zero-days exploited in the wild. The release rates 104 vulnerabilities as critical and 860 as important. ### Source excerpt 104Critical 860Important 0Moderate 0Low Microsoft addresses 964 CVEs, smashing July's release as the largest Patch Tuesday release. This month's updates include patches for two zero-days that were exploited in the wild. Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 104 rated critical and 860 rated as important. This month's update includes patches for: .NET .NET and Visual Studio ASP.NET Core Active Directory Certificate Services (AD CS) Active Directory Domain Services Active Directory Federation Services (AD FS) Audio Video Control Transport Protocol Azure Arc Azure CycleCloud Azure HDInsights BranchCache Connected Devices Platform Service (Cdpsvc) Data Sharing Service Client GitHub Copilot and Visual Studio Code Graphic Fonts HID class driver IP Helper Internet Storage Name Service Kernel Streaming WOW Thunk Service Driver Microsoft Account Microsoft Authenticator Microsoft Azure Attestation service and Device Health Attestation Service Microsoft Azure CLI Microsoft COM for Windows Microsoft Dynamics 365 Microsoft Exchange Server Microsoft Graphics Component Microsoft Install Service Microsoft JScript Microsoft Local Security Authority Server (lsasrv) Microsoft Office Microsoft Office Access Microsoft Office Excel Microsoft Office Outlook Microsoft Office PowerPoint Microsoft Office Publisher Microsoft Office SharePoint Microsoft Office Word Microsoft Standard XPS Microsoft Teams for Android Microsoft Trace Data Helper Microsoft UxTheme Library (uxtheme.dll) Microsoft WDAC OLE DB provider for SQL Microsoft WebP Image Extension Microsoft Windows Codecs Library Microsoft Windows Media Foundation Microsoft Windows PDF Microsoft Windows SCSI Class System File Microsoft Windows Search Component Microsoft Windows Speech OpenSSH for Windows Power Automate Push Message Routing Service RPC Runtime Reliable Multicast Transport Driver (RMCAST) Remote Desktop Client Remote Desktop Gateway Service Role: DNS Server Role: Windows Fax Serv ## Configuring Guix services by translating Scheme fields to YAML DevFeed: [Configuring Guix services by translating Scheme fields to YAML]() Original publisher: [Read original article]() Author: Sergio Pastor Pérez Published: 2026-09-07T08:30:00Z Content type: tutorial Language: en Sources: [GNU Guix -- Blog]() Topics: [configuration](), [YAML](), [OpenSSH]() Tags: [configuration](), [development](), [functional-package-management](), [how-to](), [openssh](), [programming-interfaces](), [scheme-api](), [yaml]() ### AI overview This tutorial explains how Guix services represent configuration through Scheme bindings and how to define a complex Goimapnotify service configuration by translating Guile Scheme fields into YAML. ### Source excerpt Guix system and Guix home introduce the concept of services. These provide users with a way to control background processes, commonly refereed as daemons , as well as ways of controlling the setup of files. For example, openssh-service-type is a service which controls a SSH daemon. In contrast, etc-service-type is a service that populates the contents of the /etc directory. One peculiarity of Guix services is that it's customary to provide Scheme bindings for the different fields. By that I mean that the different fields of the configuration of most services will be a... ## August 2026 Updates #1 for XCP-ng 8.3 LTS DevFeed: [August 2026 Updates #1 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Samuel Verschelde Published: 2026-08-18T16:22:04Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [Disk image](), [cloud-infrastructure](), [Software]() Tags: [bug-fixes](), [lts](), [maintenance](), [maintenance-updates](), [openssh](), [performance](), [storage](), [update](), [updates]() ### AI overview This article announces maintenance updates for XCP-ng 8.3 LTS. It explains the required rolling update process and highlights storage improvements, including live leaf coalescing for QCOW2, faster QCOW2 storage repository scans, and improved responsiveness for LINSTOR storage repositories. ### Source excerpt Maintenance updates for XCP-ng: storage performance and fixes, configurable OpenSSH, and much more. ## Linux ssh-keygen: Set Up SSH Key Authentication the Right Way DevFeed: [Linux ssh-keygen: Set Up SSH Key Authentication the Right Way]() Original publisher: [Read original article]() Author: Hayden James Published: 2026-08-03T10:53:19Z Content type: tutorial Language: en Sources: [Hayden James]() Topics: [OpenSSH](), [ssh](), [Linux](), [Authentication](), [Security](), [passwords]() Tags: [authentication](), [blog](), [guide](), [linux](), [openssh](), [password](), [private-key](), [public-key](), [security](), [server](), [ssh](), [sysadmins]() ### AI overview A practical guide to setting up SSH key authentication on Linux with ssh-keygen. It covers generating key pairs, copying public keys to servers, disabling password login safely, configuring multiple identities, and using passphrases or FIDO2 security keys. ### Source excerpt Password-based SSH login is a liability. This guide walks through generating SSH key pairs with ssh-keygen, deploying public keys, disabling password authentication, and managing multiple keys cleanly with ~/.ssh/config. Continue reading... ## June 2026 Updates #1 for XCP-ng 8.3 LTS DevFeed: [June 2026 Updates #1 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Philippe Coval Published: 2026-06-02T16:17:58Z Content type: release Language: en Sources: [XCP-ng Blog]() Topics: [Linux](), [Vulnerabilities](), [Security](), [OpenSSH](), [UEFI](), [USB](), [io\_uring]() Tags: [2026](), [bugfixes](), [linux](), [linux-kernel](), [lts](), [maintenance-updates](), [openssh](), [release](), [security](), [security-vulnerabilities](), [uefi](), [update](), [updates](), [usb]() ### AI overview XCP-ng 8.3 LTS receives security and maintenance updates. The release fixes Linux kernel vulnerabilities in the control domain, including issues that could allow an unprivileged local user to gain root privileges, and rejects obsolete insecure OpenSSH clients. It also includes improvements for USB smartcard passthrough, QEMU memory mapping, UEFI booting and CPU limits, PXE booting, and dmidecode. ### Source excerpt Security vulnerabilities have been identified and fixed in the Linux kernel used by XCP-ng's control domain (dom0). Additional lower-priority maintenance updates are included in this release alongside these security fixes. ## PowerShell, OpenSSH, and DSC team investments for 2026 DevFeed: [PowerShell, OpenSSH, and DSC team investments for 2026]() Original publisher: [Read original article]() Author: Steve Lee Published: 2026-02-17T19:21:34Z Content type: article Language: en Sources: [PowerShell Team]() Topics: [PowerShell](), [OpenSSH](), [Security](), [Tooling](), [pull-requests]() Tags: [community](), [openssh](), [post](), [powershell](), [pull-requests](), [security](), [tooling]() ### AI overview The PowerShell, OpenSSH, and DSC teams outline planned investments for 2026, emphasizing security and compliance, critical bug fixes, community pull requests, and upcoming PowerShell improvements. Proposed work includes relocating PSUserContentPath, enabling module features without profile scripts, and improving update notifications. ### Source excerpt Planned team investments for 2026 for PowerShell, OpenSSH, DSC, and related tooling. The post PowerShell, OpenSSH, and DSC team investments for 2026 appeared first on PowerShell Team. ## Cómo configurar un servidor SSH seguro en Linux DevFeed: [Cómo configurar un servidor SSH seguro en Linux]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-01-01T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [OpenSSH](), [Linux](), [Fail2ban]() Tags: [fail2ban](), [firewall](), [hardening](), [linux](), [openssh]() ### AI overview A step-by-step guide to securing an OpenSSH server on Linux. It covers layered protections including non-standard ports, public-key authentication, hardened ciphers, two-factor authentication, and fail2ban, along with configuration and verification guidance. ### Source excerpt Guía paso a paso para configurar y securizar un servidor SSH en cualquier servidor Linux, incluyendo autenticación por clave, fail2ban y mejores prácticas. ## Recovering/undeleting short deleted files in 50 SLOC of pure C, any filesystem supported. DevFeed: [Recovering/undeleting short deleted files in 50 SLOC of pure C, any filesystem supported.]() Original publisher: [Read original article]() Published: 2025-10-13T22:00:00Z Content type: tutorial Language: en Sources: [Dennis Yurichev]() Topics: [C](), [OpenSSH](), [Linux](), [SQLite](), [Bitcoin](), [Cryptography]() Tags: [bitcoin](), [bug](), [c](), [encryption](), [files](), [filesystem](), [linux](), [openssh](), [private-key](), [sqlite]() ### AI overview This article presents a small pure-C utility for recovering short deleted files by scanning storage for known file headers or boundary strings. It describes recovering data from Linux ext4 SSDs, virtual-machine images, and RAM save files, and notes that deleted OpenSSH keys and Bitcoin wallets may be identifiable. It recommends secure deletion and filesystem encryption to reduce recovery risk. ### Source excerpt Recovering/undeleting short deleted files in 50 SLOC of pure C, any filesystem supported. ## Mobian Trixie Released as the New Stable Version with Rotating Signing Keys DevFeed: [Mobian Trixie Released as the New Stable Version with Rotating Signing Keys]() Original publisher: [Read original article]() Author: Mobian team Published: 2025-10-13T12:00:00Z Content type: release Language: en Sources: [Mobian's Blog]() Topics: [Debian](), [Mobile](), [Kernel](), [OpenSSH]() Tags: [kernel](), [mobile](), [openssh](), [release](), [stable](), [upgrade]() ### AI overview Mobian has released Trixie as its new stable version and is beginning to rotate the PGP/GPG keys used to sign its images and package archive. The release includes mobile images based on Phosh 46.0 and Plasma Mobile 6.3, with a 6.12 kernel for most supported devices. ### Source excerpt A little more than 2 months after Debian, we're finally releasing Mobian Trixie as our new stable release! We're also taking this opportunity to start rotating the PGP/GPG keys we're using for signing both our images and package archive. Trixie has landed! Over 2 years in the making, and with a small delay following the Debian release, we're proud to finally announce Mobian Trixie has just been released and is therefore our new stable! This release offers images based on Phosh 46.0 and Plasma Mobile 6.3, running a 6.12 kernel for almost all supported devices (the Librem 5 is still using a 6.6 kernel), the list of which is growing as we now provide stable images for the following phones and tablets: PINE64 PinePhone, PinePhone Pro and PineTab Purism Librem 5 Google Pixel 3a and 3a XL OnePlus 6 and 6T Xiaomi Pocophone F1 Trixie images are also available for the following devices, although important hardware features (such as e.g. WiFi or audio) are not working: Fairphone 4 and 5 PINE64 PineTab 2 SHIFT6mq Please check our installation instructions and download the image for your device. Upgrade procedure Although we do our best to provide a smooth upgrade path for each Mobian release, as a downstream Debian derivative, and the mobile software stack being a quickly moving target, major Mobian upgrades are usually trickier than we'd hoped for. This time is no exception, and therefore we highly recommend that you backup all your personal data, flash your device with a fresh Trixie image, then restore your files. If you feel brave enough to go the "manual upgrade" route, here are a few tricks you should know: keep your device plugged to a power source: such an upgrade can be a rather long process, you don't want to run out of battery half-way there! backup all your personal data really, we mean it: backup all your personal data! install openssh-server and execute the entire upgrade process over SSH (and preferrably using screen or a similar tool, so the upgrade can carry o ## Response: NAT Traversal Mess DevFeed: [Response: NAT Traversal Mess]() Original publisher: [Read original article]() Published: 2025-04-10T06:00:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [networking](), [firewalls](), [client](), [Protocol (disambiguation)]() Tags: [connectivity](), [firewalls](), [github](), [internet](), [libraries](), [nat](), [networking](), [openssh](), [pypi](), [python](), [security](), [video-conferencing]() ### AI overview The article examines NAT traversal for client-to-client connectivity, explaining the roles and limitations of STUN, TURN, and ICE, and contrasting them with protocols that request public ports from NAT devices. It argues that NAT remains difficult to avoid and notes the availability of libraries that simplify implementation. ### Source excerpt Let's look at another part of the lengthy comment Bob left after listening to the Rise of NAT podcast. This one is focused on the NAT traversal mess: You mentioned that only video-conferencing and BitTorrent use client-to-client connectivity (and they are indeed the main use cases), but hell, do they need to engineer complex systems to circumvent these NATs and firewalls: STUN, TURN, ICE, DHT... Cleaning up the acronym list first: DHT is unlike the others and has nothing to do with NAT. Read more ... ## Nix Weekly Recap: 2024-07-07 DevFeed: [Nix Weekly Recap: 2024-07-07]() Original publisher: [Read original article]() Published: 2024-07-07T00:00:00Z Content type: news Language: en Sources: [nixpkgs.news]() Topics: [Nix](), [OpenSSH](), [vulnerability](), [Development](), [Command-line interface](), [FIRST](), [Shell](), [Bash](), [GitHub]() Tags: [github](), [modular](), [module](), [news](), [openssh](), [recap](), [report](), [security](), [security-advisory](), [weekly]() ### AI overview This weekly Nix ecosystem recap announces that nixpkgs.news will stop issuing new releases and focus primarily on news about Lix and Aux. It also covers an OpenSSH CVE-2024-6387 security advisory, the modular make-shell project, the faster nix-search utility, and updates to Nixpkgs governance. ### Source excerpt Critical SSH vulnerability, improved DX for dev shells, faster search, and Nix Constitutional Assembly updates. ## Chainguard's response to CVE-2024-3094, aka the backdoor in xz library DevFeed: [Chainguard's response to CVE-2024-3094, aka the backdoor in xz library]() Original publisher: [Read original article]() Published: 2024-03-29T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [vulnerability](), [chainguard images](), [backdoor](), [OpenSSH](), [Compression](), [Linux]() Tags: [backdoor](), [chainguard](), [chainguard-images](), [compression](), [customer-trust](), [cve](), [cve-2024-3094](), [liblzma](), [linux](), [malware](), [open-source](), [openssh](), [secure-images](), [security](), [xz](), [xz-library]() ### AI overview Chainguard describes its response to CVE-2024-3094, a backdoor introduced into the upstream xz/liblzma project. It says its Images were not affected, while impacted packages were withdrawn, revoked, and rebuilt with unaffected liblzma versions. ### Source excerpt Chainguard effectively addresses CVE-2024-3094 in xz library, showcasing quick action to secure images and uphold customer trust. ## Application and AI roundup - August DevFeed: [Application and AI roundup - August]() Original publisher: [Read original article]() Author: Adam Published: 2023-08-30T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [LLMs](), [Application Security](), [Artificial Intelligence](), [OpenSSH](), [Security]() Tags: [ai](), [amazon](), [application-security](), [cybersecurity](), [llms](), [openssh](), [security]() ### AI overview An August roundup of articles and developments covering large language models, AI product development, AI threats, application security, threat modeling, OpenSSH sandboxing, regulatory requirements, and Amazon's Threat Composer tool. ### Source excerpt Lots of interesting work in LLMs (again) ## How to Choose an SSH Client for Windows DevFeed: [How to Choose an SSH Client for Windows]() Original publisher: [Read original article]() Author: info@goteleport.com (Ruort Zest, Grzegorz Zdunek) Published: 2023-08-20T00:00:00Z Content type: comparison Language: en Sources: [Teleport]() Topics: [ssh](), [Windows](), [client](), [OpenSSH](), [Software](), [Terminal](), [Authentication](), [certificates](), [Protocol (disambiguation)](), [Firewall]() Tags: [authentication](), [certificates](), [command-line](), [compare](), [comparison](), [firewall](), [openssh](), [ssh](), [windows]() ### AI overview This comparison reviews Windows-friendly SSH clients for connecting securely to Linux-based servers, Kubernetes containers, and microservices. It discusses cost, setup and usability, protocol support, and features, including PuTTY and SecureCRT. ### Source excerpt There are several Windows-friendly SSH clients to keep connections secure. We explore the most common ones and compare their core characteristics. ## Teleport Files with SCP DevFeed: [Teleport Files with SCP]() Original publisher: [Read original article]() Author: ben@goteleport.com (Ben Arent) Published: 2023-06-30T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [OpenSSH](), [Command-line interface](), [Linux](), [systems]() Tags: [command-line](), [credentials](), [files](), [how-to](), [linux](), [openssh](), [remote](), [server](), [sftp](), [ssh]() ### AI overview A tutorial on transferring files between local and remote systems with SCP, including copying files in both directions and between two remote hosts. It covers OpenSSH SCP and Teleport's secure file copy options, including the Teleport UI and Teleport Connect. ### Source excerpt In this blog post, we'll cover how to transfer files from one server to another. ## Teleport 13 Newsletter DevFeed: [Teleport 13 Newsletter]() Original publisher: [Read original article]() Author: ben@goteleport.com (Ben Arent) Published: 2023-04-15T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [releases](), [Release notes](), [OpenSSH](), [OpenID connect (OIDC)](), [opensearch](), [terraform provider](), [Windows]() Tags: [aws](), [newsletter](), [oidc](), [opensearch](), [openssh](), [release](), [releases](), [terraform-provider](), [updates]() ### AI overview The May 2023 Teleport newsletter summarizes the Teleport 13 release, including automatic agent upgrades, no-code AWS onboarding, TLS routing through an ALB, universal binaries, improved OpenSSH support, Kubernetes tracing, Okta application protection, AWS OpenSearch support, and Windows session recording export. ### Source excerpt Teleport 13 Newsletter - May 2023 Edition ## SFTP: a More Secure Successor to SCP DevFeed: [SFTP: a More Secure Successor to SCP]() Original publisher: [Read original article]() Author: andrew.lefevre@goteleport.com (Andrew LeFevre) Published: 2022-12-30T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Security, Privacy and Abuse Prevention](), [OpenSSH](), [Vulnerabilities](), [Encryption](), [integrity]() Tags: [cryptography](), [openssh](), [secure-software](), [ssh](), [vulnerabilities]() ### AI overview This article explains how SCP and SFTP transfer files over SSH, describes SCP's operation, and argues that SFTP is the more secure successor and should generally be preferred. It also discusses security properties and vulnerabilities associated with SCP. ### Source excerpt SCP is a simple protocol, but it's not secure. SFTP is a more secure successor to SCP, and should be used wherever possible. ## Why OpenSSH private key files differ after restoration DevFeed: [Why OpenSSH private key files differ after restoration]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2022-12-20T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [OpenSSH](), [private key](), [Go](), [Code](), [C]() Tags: [code](), [go](), [openssh](), [private-key](), [ssh]() ### AI overview This article investigates why restoring an SSH private key and marshaling it back to OpenSSH private-key format produces a different block. It explains that duplicated random values in the encrypted format allow successful decryption to be checked, while the restored keys can still represent the same key. ### Source excerpt Not long ago, when I was building melt, I learned something interesting. ## Issuing and using SSH Certificates DevFeed: [Issuing and using SSH Certificates]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2022-11-09T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [certificates](), [ssh](), [OpenSSH](), [Docker](), [configuration-management]() Tags: [certificates](), [configuration-management](), [docker](), [openssh](), [private-key](), [public-key](), [ssh]() ### AI overview This tutorial explains how SSH certificates let administrators control access to servers without managing authorized keys. It covers creating a Certificate Authority key pair, issuing short-lived user certificates, using certificates with private keys, and testing the setup with OpenSSH in Docker. ### Source excerpt SSH certificates allow system administrators to SSH into machines without having to manage authorized keys in the servers. ## SSH Certificates: How Do OpenSSH Certificates Compare to X.509? DevFeed: [SSH Certificates: How Do OpenSSH Certificates Compare to X.509?]() Original publisher: [Read original article]() Author: sakshyam.shah@goteleport.com (Sakshyam Shah) Published: 2022-06-23T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [OpenSSH](), [certificates](), [Authentication](), [public key]() Tags: [authentication](), [certificates](), [openssh](), [public-key](), [security]() ### AI overview This article explains how OpenSSH certificates differ from X.509 certificates. It describes OpenSSH's custom certificate format and certificate-based authentication flow, including CA signing, certificate validation, expiration checks, and security constraints. ### Source excerpt Learn how OpenSSH certificates differ from X.509. ## SSH configuration | ssh\_config DevFeed: [SSH configuration | ssh\_config]() Original publisher: [Read original article]() Author: info@goteleport.com (Virag Mody) Published: 2022-05-02T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [ssh](), [configuration](), [OpenSSH](), [Unix](), [macOS](), [Windows]() Tags: [command-line](), [configuration](), [ecdsa](), [ed25519](), [linux](), [macos](), [openssh](), [remote](), [security](), [ssh](), [tips](), [tips-and-tricks](), [tutorial]() ### AI overview A tutorial on configuring the SSH client through ssh_config. It explains configuration precedence, host-specific settings, readable stanzas, and ways to improve security, reduce failures, and simplify connections to remote machines. ### Source excerpt What is ssh_config? How do you configure an SSH client with it? This blog post offers some of our favorite tips and tricks! ## How to Configure SSH Certificate-Based Authentication DevFeed: [How to Configure SSH Certificate-Based Authentication]() Original publisher: [Read original article]() Author: info@goteleport.com (Honda McLaren) Published: 2022-04-26T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Authentication](), [certificates](), [OpenSSH](), [Tutorial](), [Security](), [public key](), [private key]() Tags: [authentication](), [certificates](), [openssh](), [private-key](), [protocol](), [public-key](), [security](), [ssh](), [tutorial]() ### AI overview This tutorial explains how to configure SSH certificate-based authentication for an OpenSSH server. It contrasts static SSH keys with short-lived, CA-signed certificates that include identity, expiration, and policy controls, and outlines how servers validate certificates. ### Source excerpt Learn how to configure SSH certificate-based authentication in OpenSSH using short-lived, CA-signed certificates to replace static SSH keys and improve security. [Next page]()