Units
Translation components API.
See the Weblate's Web API documentation for detailed description of the API.
GET /api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/units/?format=api&page=4
{ "count": 365, "next": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/units/?format=api&page=5", "previous": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/units/?format=api&page=3", "results": [ { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Generate a host certificate signing key, `ca_host_key`, as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": 9213302060273904066, "content_hash": 9213302060273904066, "location": "./pages/infrastructure-services/OpenSSH.adoc:533", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 151, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/899534/?format=api", "priority": 100, "id": 17750174, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=ffdc3968df0029c2", "url": "https://translate.fedoraproject.org/api/units/17750174/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.183068Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# ssh-keygen -t rsa -f ~/.ssh/ca_host_key\nGenerating public/private rsa key pair.\nEnter passphrase (empty for no passphrase):\nEnter same passphrase again:\nYour identification has been saved in /root/.ssh/ca_host_key.\nYour public key has been saved in /root/.ssh/ca_host_key.pub.\nThe key fingerprint is:\ne4:d5:d1:4f:6b:fd:a2:e3:4e:5a:73:52:91:0b:b7:7a root@host_name.example.com\nThe key's randomart image is:\n+--[ RSA 2048]----+\n| .. |\n| . ....|\n| . . o +oo|\n| o . o *o|\n| S = .|\n| o. .|\n| *.E. |\n| +o= |\n| .oo. |\n+-----------------+\n" ], "previous_source": "", "target": [ "" ], "id_hash": -7969747538754736070, "content_hash": -7969747538754736070, "location": "./pages/infrastructure-services/OpenSSH.adoc:555", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 152, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 83, "source_unit": "https://translate.fedoraproject.org/api/units/899538/?format=api", "priority": 100, "id": 17750175, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=1165c4d6cafaf03a", "url": "https://translate.fedoraproject.org/api/units/17750175/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.187125Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "If required, confirm the permissions are correct:" ], "previous_source": "", "target": [ "" ], "id_hash": -1869566723555367932, "content_hash": -1869566723555367932, "location": "./pages/infrastructure-services/OpenSSH.adoc:558", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 153, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/899543/?format=api", "priority": 100, "id": 17750176, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=660df6f866976404", "url": "https://translate.fedoraproject.org/api/units/17750176/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.189746Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# ls -la ~/.ssh\ntotal 40\ndrwxrwxrwx. 2 root root 4096 May 22 13:18 .\ndr-xr-x---. 3 root root 4096 May 8 08:34 ..\n-rw-------. 1 root root 1743 May 22 13:15 ca_host_key\n-rw-r--r--. 1 root root 420 May 22 13:15 ca_host_key.pub\n-rw-------. 1 root root 1743 May 22 13:14 ca_user_key\n-rw-r--r--. 1 root root 420 May 22 13:14 ca_user_key.pub\n-rw-r--r--. 1 root root 854 May 8 05:55 known_hosts\n-r--------. 1 root root 1671 May 6 17:13 ssh_host_rsa\n-rw-r--r--. 1 root root 1370 May 7 14:30 ssh_host_rsa-cert.pub\n-rw-------. 1 root root 420 May 6 17:13 ssh_host_rsa.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 9209061002961107602, "content_hash": 9209061002961107602, "location": "./pages/infrastructure-services/OpenSSH.adoc:572", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 154, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 96, "source_unit": "https://translate.fedoraproject.org/api/units/899547/?format=api", "priority": 100, "id": 17750177, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=ffcd2830c4663a92", "url": "https://translate.fedoraproject.org/api/units/17750177/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.193299Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Create the CA server's own host certificate by signing the server's host public key together with an identification string such as the host name, the CA server's _fully qualified domain name_ (*FQDN*) but without the trailing `.`, and a validity period. The command takes the following form:" ], "previous_source": "", "target": [ "" ], "id_hash": -825133634962011410, "content_hash": -825133634962011410, "location": "./pages/infrastructure-services/OpenSSH.adoc:575", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 155, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 47, "source_unit": "https://translate.fedoraproject.org/api/units/899551/?format=api", "priority": 100, "id": 17750178, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=748c8954abdccaee", "url": "https://translate.fedoraproject.org/api/units/17750178/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.195945Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "ssh-keygen -s ~/.ssh/ca_host_key -I pass:quotes[_certificate_ID_] -h -n pass:quotes[_host_name.example.com_] -V pass:quotes[_-start:+end_] /etc/ssh/ssh_host_rsa.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 5346577250639073187, "content_hash": 5346577250639073187, "location": "./pages/infrastructure-services/OpenSSH.adoc:579", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 156, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 11, "source_unit": "https://translate.fedoraproject.org/api/units/899555/?format=api", "priority": 100, "id": 17750179, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=ca32dbae9c86cfa3", "url": "https://translate.fedoraproject.org/api/units/17750179/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.199709Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "The [option]`-n` option restricts this certificate to a specific host within the domain. The [option]`-V` option is for adding a validity period; this is highly recommend. Where the validity period is intended to be one year, fifty two weeks, consider the need for time to change the certificates and any holiday periods around the time of certificate expiry." ], "previous_source": "", "target": [ "" ], "id_hash": -2040553503422030884, "content_hash": -2040553503422030884, "location": "./pages/infrastructure-services/OpenSSH.adoc:582", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 157, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 58, "source_unit": "https://translate.fedoraproject.org/api/units/899559/?format=api", "priority": 100, "id": 17750180, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=63ae7f666359dbdc", "url": "https://translate.fedoraproject.org/api/units/17750180/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.202380Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "For example:" ], "previous_source": "", "target": [ "" ], "id_hash": -3643751247835186919, "content_hash": -3643751247835186919, "location": "./pages/infrastructure-services/OpenSSH.adoc:584", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 158, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate.fedoraproject.org/api/units/899563/?format=api", "priority": 100, "id": 17750181, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=4d6ecb8ba6e5b919", "url": "https://translate.fedoraproject.org/api/units/17750181/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.206344Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# ssh-keygen -s ~/.ssh/ca_host_key -I host_name -h -n host_name.example.com -V -1w:+54w5d /etc/ssh/ssh_host_rsa.pub\nEnter passphrase:\nSigned host key /root/.ssh/ssh_host_rsa-cert.pub: id \"host_name\" serial 0 for host_name.example.com valid from 2015-05-15T13:52:29 to 2016-06-08T13:52:29\n" ], "previous_source": "", "target": [ "" ], "id_hash": 2880580515380290911, "content_hash": 2880580515380290911, "location": "./pages/infrastructure-services/OpenSSH.adoc:589", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 159, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate.fedoraproject.org/api/units/899567/?format=api", "priority": 100, "id": 17750182, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=a7f9e0b77e27655f", "url": "https://translate.fedoraproject.org/api/units/17750182/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.208793Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Distributing and Trusting SSH CA Public Keys" ], "previous_source": "", "target": [ "" ], "id_hash": 6872425695605747360, "content_hash": 6872425695605747360, "location": "./pages/infrastructure-services/OpenSSH.adoc:592", "context": "", "note": "type: Title =====", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 160, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/899571/?format=api", "priority": 100, "id": 17750183, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=df5fc2c22bd8eea0", "url": "https://translate.fedoraproject.org/api/units/17750183/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.211617Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Hosts that are to allow certificate authenticated log in from users must be configured to trust the CA's public key that was used to sign the user certificates, in order to authenticate user's certificates. In this example that is the `ca_user_key.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": -22891256906980289, "content_hash": -22891256906980289, "location": "./pages/infrastructure-services/OpenSSH.adoc:595", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 161, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 41, "source_unit": "https://translate.fedoraproject.org/api/units/899575/?format=api", "priority": 100, "id": 17750184, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=7faeac85eb98e43f", "url": "https://translate.fedoraproject.org/api/units/17750184/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.214072Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Publish the `ca_user_key.pub` key and download it to all hosts that are required to allow remote users to log in. Alternately, copy the CA user public key to all the hosts. In a production environment, consider copying the public key to an administrator account first. The secure copy command can be used to copy the public key to remote hosts. The command has the following format:" ], "previous_source": "", "target": [ "" ], "id_hash": 1503754723105098281, "content_hash": 1503754723105098281, "location": "./pages/infrastructure-services/OpenSSH.adoc:597", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 162, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 66, "source_unit": "https://translate.fedoraproject.org/api/units/899579/?format=api", "priority": 100, "id": 17750185, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=94de68f413feca29", "url": "https://translate.fedoraproject.org/api/units/17750185/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.217225Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "scp ~/.ssh/ca_user_key.pub root@pass:quotes[_host_name_].example.com:/etc/ssh/\n" ], "previous_source": "", "target": [ "" ], "id_hash": -3642211521026008103, "content_hash": -3642211521026008103, "location": "./pages/infrastructure-services/OpenSSH.adoc:601", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 163, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/899582/?format=api", "priority": 100, "id": 17750186, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=4d7443eb3c68dbd9", "url": "https://translate.fedoraproject.org/api/units/17750186/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.220383Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Where _host_name_ is the host name of a server the is required to authenticate user's certificates presented during the login process. Ensure you copy the public key not the private key. For example, as `root`:" ], "previous_source": "", "target": [ "" ], "id_hash": 3305908582294539546, "content_hash": 3305908582294539546, "location": "./pages/infrastructure-services/OpenSSH.adoc:604", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 164, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 35, "source_unit": "https://translate.fedoraproject.org/api/units/899586/?format=api", "priority": 100, "id": 17750187, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=ade0f2571394cd1a", "url": "https://translate.fedoraproject.org/api/units/17750187/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.224506Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# scp ~/.ssh/ca_user_key.pub root@host_name.example.com:/etc/ssh/\nThe authenticity of host 'host_name.example.com (10.34.74.56)' can't be established.\nRSA key fingerprint is fc:23:ad:ae:10:6f:d1:a1:67:ee:b1:d5:37:d4:b0:2f.\nAre you sure you want to continue connecting (yes/no)? yes\nWarning: Permanently added 'host_name.example.com,10.34.74.56' (RSA) to the list of known hosts.\nroot@host_name.example.com's password:\nca_user_key.pub 100% 420 0.4KB/s 00:00\n" ], "previous_source": "", "target": [ "" ], "id_hash": 2727833640137222204, "content_hash": 2727833640137222204, "location": "./pages/infrastructure-services/OpenSSH.adoc:613", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 165, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/899588/?format=api", "priority": 100, "id": 17750188, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=a5db363e36bd683c", "url": "https://translate.fedoraproject.org/api/units/17750188/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.227332Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "For remote user authentication, CA keys can be marked as trusted per-user in the `~/.ssh/authorized_keys` file using the [command]#cert-authority# directive or for global use by means of the [command]#TrustedUserCAKeys# directive in the `/etc/ssh/sshd_config` file. For remote host authentication, CA keys can be marked as trusted globally in the `/etc/ssh/known_hosts` file or per-user in the `~/.ssh/ssh_known_hosts` file." ], "previous_source": "", "target": [ "" ], "id_hash": 3355358927895020448, "content_hash": 3355358927895020448, "location": "./pages/infrastructure-services/OpenSSH.adoc:616", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 166, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 56, "source_unit": "https://translate.fedoraproject.org/api/units/899590/?format=api", "priority": 100, "id": 17750189, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=ae90a12adf1e43a0", "url": "https://translate.fedoraproject.org/api/units/17750189/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.231267Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Trusting the User Signing Key" ], "previous_source": "", "target": [ "" ], "id_hash": -8052786932470513523, "content_hash": -8052786932470513523, "location": "./pages/infrastructure-services/OpenSSH.adoc:618", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 167, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/899592/?format=api", "priority": 100, "id": 17750190, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=103ec0f34e30008d", "url": "https://translate.fedoraproject.org/api/units/17750190/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.234848Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "For user certificates which have one or more principles listed, and where the setting is to have global effect, edit the `/etc/ssh/sshd_config` file as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": -4018104024225686522, "content_hash": -4018104024225686522, "location": "./pages/infrastructure-services/OpenSSH.adoc:620", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 168, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 25, "source_unit": "https://translate.fedoraproject.org/api/units/899594/?format=api", "priority": 100, "id": 17750191, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=483cd3adc575dc06", "url": "https://translate.fedoraproject.org/api/units/17750191/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.238518Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "TrustedUserCAKeys /etc/ssh/ca_user_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 3326199101945804515, "content_hash": 3326199101945804515, "location": "./pages/infrastructure-services/OpenSSH.adoc:623", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 169, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate.fedoraproject.org/api/units/899596/?format=api", "priority": 100, "id": 17750192, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=ae290875d3b3f6e3", "url": "https://translate.fedoraproject.org/api/units/17750192/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.242181Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Restart `sshd` to make the changes take effect:" ], "previous_source": "", "target": [ "" ], "id_hash": -3600691623735195513, "content_hash": -3600691623735195513, "location": "./pages/infrastructure-services/OpenSSH.adoc:626, ./pages/infrastructure-services/OpenSSH.adoc:754", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 170, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 8, "source_unit": "https://translate.fedoraproject.org/api/units/899598/?format=api", "priority": 100, "id": 17750193, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=4e07c60ba58a0887", "url": "https://translate.fedoraproject.org/api/units/17750193/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.244661Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# service sshd restart\n" ], "previous_source": "", "target": [ "" ], "id_hash": -4808041200648062734, "content_hash": -4808041200648062734, "location": "./pages/infrastructure-services/OpenSSH.adoc:629, ./pages/infrastructure-services/OpenSSH.adoc:757", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 171, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/899600/?format=api", "priority": 100, "id": 17750194, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=3d46680089edf8f2", "url": "https://translate.fedoraproject.org/api/units/17750194/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.247927Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "To avoid being presented with the warning about an unknown host, a user's system must trust the CA's public key that was used to sign the host certificates. In this example that is `ca_host_key.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": -7442281670338817679, "content_hash": -7442281670338817679, "location": "./pages/infrastructure-services/OpenSSH.adoc:632", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 172, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 34, "source_unit": "https://translate.fedoraproject.org/api/units/899602/?format=api", "priority": 100, "id": 17750195, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=18b7b440710dd171", "url": "https://translate.fedoraproject.org/api/units/17750195/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.250900Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Trusting the Host Signing Key" ], "previous_source": "", "target": [ "" ], "id_hash": 8881275522096958850, "content_hash": 8881275522096958850, "location": "./pages/infrastructure-services/OpenSSH.adoc:634", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 173, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/899604/?format=api", "priority": 100, "id": 17750196, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=fb40a10846f60d82", "url": "https://translate.fedoraproject.org/api/units/17750196/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.254476Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Extract the contents of the public key used to sign the host certificate. For example, on the CA:" ], "previous_source": "", "target": [ "" ], "id_hash": 1666541473212174740, "content_hash": 1666541473212174740, "location": "./pages/infrastructure-services/OpenSSH.adoc:636", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 174, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 18, "source_unit": "https://translate.fedoraproject.org/api/units/899606/?format=api", "priority": 100, "id": 17750197, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=9720bea3e2449194", "url": "https://translate.fedoraproject.org/api/units/17750197/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.257054Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "cat ~/.ssh/ca_host_key.pub\nssh-rsa pass:quotes[_AAAAB5Wm._]== root@ca-server.example.com\n" ], "previous_source": "", "target": [ "" ], "id_hash": -9207290092019541174, "content_hash": -9207290092019541174, "location": "./pages/infrastructure-services/OpenSSH.adoc:641", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 175, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/899608/?format=api", "priority": 100, "id": 17750198, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=0039227191339b4a", "url": "https://translate.fedoraproject.org/api/units/17750198/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.259516Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "To configure client systems to trust servers' signed host certificates, add the contents of the `ca_host_key.pub` into the global `known_hosts` file. This will automatically check a server's host advertised certificate against the CA public key for all users every time a new machine is connected to in the domain `*.example.com`. Login as `root` and configure the `/etc/ssh/ssh_known_hosts` file, as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": 3244899416033123796, "content_hash": 3244899416033123796, "location": "./pages/infrastructure-services/OpenSSH.adoc:644", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 176, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 60, "source_unit": "https://translate.fedoraproject.org/api/units/899610/?format=api", "priority": 100, "id": 17750199, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=ad0832d3a086ddd4", "url": "https://translate.fedoraproject.org/api/units/17750199/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.262402Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# vi /etc/ssh/ssh_known_hosts\n# A CA key, accepted for any host in *.example.com\n@cert-authority *.example.com ssh-rsa pass:quotes[_AAAAB5Wm._]\n" ], "previous_source": "", "target": [ "" ], "id_hash": -3163044009712318393, "content_hash": -3163044009712318393, "location": "./pages/infrastructure-services/OpenSSH.adoc:650", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 177, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 17, "source_unit": "https://translate.fedoraproject.org/api/units/899612/?format=api", "priority": 100, "id": 17750200, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=541a9c3b502b8847", "url": "https://translate.fedoraproject.org/api/units/17750200/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.264760Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Where `ssh-rsa _AAAAB5Wm._pass:attributes[{blank}]` is the contents of `ca_host_key.pub`. The above configures the system to trust the CA servers host public key. This enables global authentication of the certificates presented by hosts to remote users." ], "previous_source": "", "target": [ "" ], "id_hash": 6618392792553376760, "content_hash": 6618392792553376760, "location": "./pages/infrastructure-services/OpenSSH.adoc:653", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 178, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 34, "source_unit": "https://translate.fedoraproject.org/api/units/899614/?format=api", "priority": 100, "id": 17750201, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=dbd9412dd8264bf8", "url": "https://translate.fedoraproject.org/api/units/17750201/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.267642Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Creating SSH Certificates" ], "previous_source": "", "target": [ "" ], "id_hash": -4513075604629555691, "content_hash": -4513075604629555691, "location": "./pages/infrastructure-services/OpenSSH.adoc:655", "context": "", "note": "type: Title =====", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 179, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/899616/?format=api", "priority": 100, "id": 17750202, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=415e55a61d92f615", "url": "https://translate.fedoraproject.org/api/units/17750202/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.269960Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "A certifcate is a signed public key. The user's and host's public keys must be copied to the CA server for signing by the CA server's private key." ], "previous_source": "", "target": [ "" ], "id_hash": -6314941917788238280, "content_hash": -6314941917788238280, "location": "./pages/infrastructure-services/OpenSSH.adoc:658", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 180, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 28, "source_unit": "https://translate.fedoraproject.org/api/units/899618/?format=api", "priority": 100, "id": 17750203, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=285cd1c8a5020e38", "url": "https://translate.fedoraproject.org/api/units/17750203/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.272825Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Copying many keys to the CA to be signed can create confusion if they are not uniquely named. If the default name is always used then the latest key to be copied will overwrite the previously copied key, which may be an acceptable method for one administrator. In the example below the default name is used. In a production environment, consider using easily recognizable names. It is recommend to have a designated directory on the CA server owned by an administrative user for the keys to be copied into. Copying these keys to the `root` user's `/etc/ssh/` directory is not recommend. In the examples below an account named `admin` with a directory named `keys/` will be used." ], "previous_source": "", "target": [ "" ], "id_hash": 4925376788115266872, "content_hash": 4925376788115266872, "location": "./pages/infrastructure-services/OpenSSH.adoc:663", "context": "", "note": "type: delimited block =", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 181, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 117, "source_unit": "https://translate.fedoraproject.org/api/units/899620/?format=api", "priority": 100, "id": 17750204, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=c45a7417d0909d38", "url": "https://translate.fedoraproject.org/api/units/17750204/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.276098Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Create an administrator account, in this example `admin`, and a directory to receive the user's keys. For example:" ], "previous_source": "", "target": [ "" ], "id_hash": 3122831281519296648, "content_hash": 3122831281519296648, "location": "./pages/infrastructure-services/OpenSSH.adoc:667", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 182, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 18, "source_unit": "https://translate.fedoraproject.org/api/units/899622/?format=api", "priority": 100, "id": 17750205, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=ab5686814c6f8088", "url": "https://translate.fedoraproject.org/api/units/17750205/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.278707Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]$ [command]#mkdir keys#\n" ], "previous_source": "", "target": [ "" ], "id_hash": -7784680188272738234, "content_hash": -7784680188272738234, "location": "./pages/infrastructure-services/OpenSSH.adoc:671", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 183, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/899624/?format=api", "priority": 100, "id": 17750206, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=13f7429d1ffb8046", "url": "https://translate.fedoraproject.org/api/units/17750206/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.281262Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Set the permissions to allow keys to be copied in:" ], "previous_source": "", "target": [ "" ], "id_hash": 8744194619115921281, "content_hash": 8744194619115921281, "location": "./pages/infrastructure-services/OpenSSH.adoc:674", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 184, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 10, "source_unit": "https://translate.fedoraproject.org/api/units/899626/?format=api", "priority": 100, "id": 17750207, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=f9599ead67495f81", "url": "https://translate.fedoraproject.org/api/units/17750207/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.283657Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]$ chmod o+w keys\nls -la keys\ntotal 8\ndrwxrwxrwx. 2 admin admin 4096 May 22 16:17 .\ndrwx------. 3 admin admin 4096 May 22 16:17 ..\n" ], "previous_source": "", "target": [ "" ], "id_hash": 2412464309427999281, "content_hash": 2412464309427999281, "location": "./pages/infrastructure-services/OpenSSH.adoc:681", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 185, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 27, "source_unit": "https://translate.fedoraproject.org/api/units/899628/?format=api", "priority": 100, "id": 17750208, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=a17acb81f4c39231", "url": "https://translate.fedoraproject.org/api/units/17750208/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.286122Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "====== Creating SSH Certificates to Authenticate Hosts" ], "previous_source": "", "target": [ "" ], "id_hash": 7523617129172287569, "content_hash": 7523617129172287569, "location": "./pages/infrastructure-services/OpenSSH.adoc:685", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 186, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/899630/?format=api", "priority": 100, "id": 17750209, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=e86941eaca5bc051", "url": "https://translate.fedoraproject.org/api/units/17750209/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.288579Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "The command to sign a host certificate has the following format:" ], "previous_source": "", "target": [ "" ], "id_hash": 5993158508251814751, "content_hash": 5993158508251814751, "location": "./pages/infrastructure-services/OpenSSH.adoc:687", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 187, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 11, "source_unit": "https://translate.fedoraproject.org/api/units/899632/?format=api", "priority": 100, "id": 17750210, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=d32bf9e8fef59b5f", "url": "https://translate.fedoraproject.org/api/units/17750210/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.291574Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "ssh-keygen -s ca_host_key -I pass:quotes[_host_name_] -h ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 822101195683042849, "content_hash": 822101195683042849, "location": "./pages/infrastructure-services/OpenSSH.adoc:691", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 188, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/899634/?format=api", "priority": 100, "id": 17750211, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=8b68b0ae8a1c9621", "url": "https://translate.fedoraproject.org/api/units/17750211/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.294485Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "The host certificate will named `ssh_host_rsa_key-cert.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": 4122998010648860534, "content_hash": 4122998010648860534, "location": "./pages/infrastructure-services/OpenSSH.adoc:694", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 189, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/899636/?format=api", "priority": 100, "id": 17750212, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=b937d4d89a5e1776", "url": "https://translate.fedoraproject.org/api/units/17750212/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.298586Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Generating a Host Certificate" ], "previous_source": "", "target": [ "" ], "id_hash": 3607541174486540202, "content_hash": 3607541174486540202, "location": "./pages/infrastructure-services/OpenSSH.adoc:696", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 190, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/899638/?format=api", "priority": 100, "id": 17750213, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=b2108f95a9dd9faa", "url": "https://translate.fedoraproject.org/api/units/17750213/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.302081Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "To authenticate a host to a user, a public key must be generated on the host, passed to the CA server, signed by the CA, and then passed back to be stored on the host to present to a user attempting to log into the host." ], "previous_source": "", "target": [ "" ], "id_hash": -8222862438683991045, "content_hash": -8222862438683991045, "location": "./pages/infrastructure-services/OpenSSH.adoc:698", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 191, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/899640/?format=api", "priority": 100, "id": 17750214, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=0de2862db956a3fb", "url": "https://translate.fedoraproject.org/api/units/17750214/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.305590Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Host keys are generated automatically on the system. To list them enter the following command:" ], "previous_source": "", "target": [ "" ], "id_hash": 2981851149071465219, "content_hash": 2981851149071465219, "location": "./pages/infrastructure-services/OpenSSH.adoc:700", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 192, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 15, "source_unit": "https://translate.fedoraproject.org/api/units/899642/?format=api", "priority": 100, "id": 17750215, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=a961a9d2517ebb03", "url": "https://translate.fedoraproject.org/api/units/17750215/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.309299Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# ls -l /etc/ssh/ssh_host*\n-rw-------. 1 root root 668 May 6 14:38 /etc/ssh/ssh_host_dsa_key\n-rw-r--r--. 1 root root 590 May 6 14:38 /etc/ssh/ssh_host_dsa_key.pub\n-rw-------. 1 root root 963 May 6 14:38 /etc/ssh/ssh_host_key\n-rw-r--r--. 1 root root 627 May 6 14:38 /etc/ssh/ssh_host_key.pub\n-rw-------. 1 root root 1679 May 6 14:38 /etc/ssh/ssh_host_rsa_key\n-rw-r--r--. 1 root root 382 May 6 14:38 /etc/ssh/ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": -204958763796473554, "content_hash": -204958763796473554, "location": "./pages/infrastructure-services/OpenSSH.adoc:709", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 193, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 58, "source_unit": "https://translate.fedoraproject.org/api/units/899644/?format=api", "priority": 100, "id": 17750216, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=7d27d7171a4ed92e", "url": "https://translate.fedoraproject.org/api/units/17750216/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.312743Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Copy the chosen public key to the server designated as the CA. For example, from the host:" ], "previous_source": "", "target": [ "" ], "id_hash": 2869199336477116098, "content_hash": 2869199336477116098, "location": "./pages/infrastructure-services/OpenSSH.adoc:712", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 194, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 17, "source_unit": "https://translate.fedoraproject.org/api/units/899646/?format=api", "priority": 100, "id": 17750217, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=a7d17198488146c2", "url": "https://translate.fedoraproject.org/api/units/17750217/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.316197Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# scp /etc/ssh/ssh_host_rsa_key.pub admin@ca-server.example.com:~/keys/ssh_host_rsa_key.pub\nThe authenticity of host 'ca-server.example.com (10.34.74.58)' can't be established.\nRSA key fingerprint is b0:e5:ea:b8:75:e2:f0:b1:fe:5b:07:39:7f:58:64:d9.\nAre you sure you want to continue connecting (yes/no)? yes\nWarning: Permanently added 'ca-server.example.com,10.34.74.58' (RSA) to the list of known hosts.\nadmin@ca-server.example.com's password:\nssh_host_rsa_key.pub 100% 382 0.4KB/s 00:00\n" ], "previous_source": "", "target": [ "" ], "id_hash": 7582618923056680618, "content_hash": 7582618923056680618, "location": "./pages/infrastructure-services/OpenSSH.adoc:721", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 195, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/899648/?format=api", "priority": 100, "id": 17750218, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=e93adfbc6ff2ceaa", "url": "https://translate.fedoraproject.org/api/units/17750218/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.319685Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Alternately, from the CA:" ], "previous_source": "", "target": [ "" ], "id_hash": 6035717800660344033, "content_hash": 6035717800660344033, "location": "./pages/infrastructure-services/OpenSSH.adoc:724", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 196, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/899650/?format=api", "priority": 100, "id": 17750219, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=d3c32d5c70dc9ce1", "url": "https://translate.fedoraproject.org/api/units/17750219/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.323259Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]$ scp root@host_name.example.com:/etc/ssh/ssh_host_rsa_key.pub ~/keys/ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": -212577568524698132, "content_hash": -212577568524698132, "location": "./pages/infrastructure-services/OpenSSH.adoc:727", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 197, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/899652/?format=api", "priority": 100, "id": 17750220, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=7d0cc5d3e4de7dec", "url": "https://translate.fedoraproject.org/api/units/17750220/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.328401Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "On the CA server, sign the host's public key. For example, as `root`:" ], "previous_source": "", "target": [ "" ], "id_hash": -4489354168789479287, "content_hash": -4489354168789479287, "location": "./pages/infrastructure-services/OpenSSH.adoc:730", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 198, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 13, "source_unit": "https://translate.fedoraproject.org/api/units/899654/?format=api", "priority": 100, "id": 17750221, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=41b29c2b4a625089", "url": "https://translate.fedoraproject.org/api/units/17750221/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.335286Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "~]# ssh-keygen -s ~/.ssh/ca_host_key -I host_name -h -n host_name.example.com -V -1d:+54w /home/admin/keys/ssh_host_rsa_key.pub\nEnter passphrase:\nSigned host key /home/admin/keys/ssh_host_rsa_key-cert.pub: id \"host_name\" serial 0 for host_name.example.com valid from 2015-05-26T12:21:54 to 2016-06-08T12:21:54\n" ], "previous_source": "", "target": [ "" ], "id_hash": -4897533217880772689, "content_hash": -4897533217880772689, "location": "./pages/infrastructure-services/OpenSSH.adoc:735", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 199, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate.fedoraproject.org/api/units/899656/?format=api", "priority": 100, "id": 17750222, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=3c08777c908a6faf", "url": "https://translate.fedoraproject.org/api/units/17750222/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.340280Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?format=api", "source": [ "Where _host_name_ is the host name of the system requiring the certificate." ], "previous_source": "", "target": [ "" ], "id_hash": -2196293630882737562, "content_hash": -2196293630882737562, "location": "./pages/infrastructure-services/OpenSSH.adoc:738", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 200, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 12, "source_unit": "https://translate.fedoraproject.org/api/units/899658/?format=api", "priority": 100, "id": 17750223, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/nn/?checksum=6185329444c81266", "url": "https://translate.fedoraproject.org/api/units/17750223/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-05-02T04:52:12.346631Z" } ] }