Does confd inbuilt ssh support certificate authentication?

General
1

Hi,

Openssh has different ways of authentication like password, key based authentication , certificate based authentication, etc.

Does confd inbuilt ssh has support for certificate based authentication as like Openssh?

Thanks

2

Hi,
ConfD’s built-in SSH server does not support certificates. You can integrate ConfD with, for example, OpenSSH and enable OpenSSH certificates, or with Roumen Petrov’s PKIX-SSH to enable standardized X.509 certificates.

1 Like
3

Thanks for the info.
Is there document which describes the way to integrate confd ssh with Openssh?

4

@cohult
Is there document which describes the way to integrate confd ssh with Openssh?
Thanks in advance

5

OpenSSH for NETCONF sessions: See the ConfD User Guide chapter NETCONF Server section Using OpenSSH.

OpenSSH for CLI sessions: See the confd_cli(1) man page. You can, for example, add something like the below to your OpenSSH sshd_config file:

Match User admin
    ForceCommand $CONFD_DIR/bin/confd_cli -C

See also the OpenSSH ssh_config(5) man page for details.

1 Like