Units
Translation components API.
See the Weblate's Web API documentation for detailed description of the API.
GET /api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/units/?format=api&page=4
{ "count": 375, "next": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/units/?format=api&page=5", "previous": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/units/?format=api&page=3", "results": [ { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Generate a host certificate signing key, `ca_host_key`, as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": 9213302060273904066, "content_hash": 9213302060273904066, "location": "pages/infrastructure-services/OpenSSH.adoc:533", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 157, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/899534/?format=api", "priority": 100, "id": 9475899, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=ffdc3968df0029c2", "url": "https://translate.fedoraproject.org/api/units/9475899/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.470620Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# ssh-keygen -t rsa -f ~/.ssh/ca_host_key\nGenerating public/private rsa key pair.\nEnter passphrase (empty for no passphrase):\nEnter same passphrase again:\nYour identification has been saved in /root/.ssh/ca_host_key.\nYour public key has been saved in /root/.ssh/ca_host_key.pub.\nThe key fingerprint is:\ne4:d5:d1:4f:6b:fd:a2:e3:4e:5a:73:52:91:0b:b7:7a root@host_name.example.com\nThe key's randomart image is:\n+--[ RSA 2048]----+\n| .. |\n| . ....|\n| . . o +oo|\n| o . o *o|\n| S = .|\n| o. .|\n| *.E. |\n| +o= |\n| .oo. |\n+-----------------+\n" ], "previous_source": "", "target": [ "" ], "id_hash": -7969747538754736070, "content_hash": -7969747538754736070, "location": "pages/infrastructure-services/OpenSSH.adoc:555", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 158, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 83, "source_unit": "https://translate.fedoraproject.org/api/units/899538/?format=api", "priority": 100, "id": 9475900, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=1165c4d6cafaf03a", "url": "https://translate.fedoraproject.org/api/units/9475900/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.476517Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "If required, confirm the permissions are correct:" ], "previous_source": "", "target": [ "" ], "id_hash": -1869566723555367932, "content_hash": -1869566723555367932, "location": "pages/infrastructure-services/OpenSSH.adoc:558", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 159, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/899543/?format=api", "priority": 100, "id": 9475901, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=660df6f866976404", "url": "https://translate.fedoraproject.org/api/units/9475901/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.480871Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# ls -la ~/.ssh\ntotal 40\ndrwxrwxrwx. 2 root root 4096 May 22 13:18 .\ndr-xr-x---. 3 root root 4096 May 8 08:34 ..\n-rw-------. 1 root root 1743 May 22 13:15 ca_host_key\n-rw-r--r--. 1 root root 420 May 22 13:15 ca_host_key.pub\n-rw-------. 1 root root 1743 May 22 13:14 ca_user_key\n-rw-r--r--. 1 root root 420 May 22 13:14 ca_user_key.pub\n-rw-r--r--. 1 root root 854 May 8 05:55 known_hosts\n-r--------. 1 root root 1671 May 6 17:13 ssh_host_rsa\n-rw-r--r--. 1 root root 1370 May 7 14:30 ssh_host_rsa-cert.pub\n-rw-------. 1 root root 420 May 6 17:13 ssh_host_rsa.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 9209061002961107602, "content_hash": 9209061002961107602, "location": "pages/infrastructure-services/OpenSSH.adoc:572", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 160, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 96, "source_unit": "https://translate.fedoraproject.org/api/units/899547/?format=api", "priority": 100, "id": 9475902, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=ffcd2830c4663a92", "url": "https://translate.fedoraproject.org/api/units/9475902/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.484759Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Create the CA server's own host certificate by signing the server's host public key together with an identification string such as the host name, the CA server's _fully qualified domain name_ (*FQDN*) but without the trailing `.`, and a validity period. The command takes the following form:" ], "previous_source": "", "target": [ "" ], "id_hash": -825133634962011410, "content_hash": -825133634962011410, "location": "pages/infrastructure-services/OpenSSH.adoc:575", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 161, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 47, "source_unit": "https://translate.fedoraproject.org/api/units/899551/?format=api", "priority": 100, "id": 9475903, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=748c8954abdccaee", "url": "https://translate.fedoraproject.org/api/units/9475903/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.488658Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "ssh-keygen -s ~/.ssh/ca_host_key -I pass:quotes[_certificate_ID_] -h -n pass:quotes[_host_name.example.com_] -V pass:quotes[_-start:+end_] /etc/ssh/ssh_host_rsa.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 5346577250639073187, "content_hash": 5346577250639073187, "location": "pages/infrastructure-services/OpenSSH.adoc:579", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 162, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 11, "source_unit": "https://translate.fedoraproject.org/api/units/899555/?format=api", "priority": 100, "id": 9475904, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=ca32dbae9c86cfa3", "url": "https://translate.fedoraproject.org/api/units/9475904/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.492281Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "The [option]`-n` option restricts this certificate to a specific host within the domain. The [option]`-V` option is for adding a validity period; this is highly recommend. Where the validity period is intended to be one year, fifty two weeks, consider the need for time to change the certificates and any holiday periods around the time of certificate expiry." ], "previous_source": "", "target": [ "" ], "id_hash": -2040553503422030884, "content_hash": -2040553503422030884, "location": "pages/infrastructure-services/OpenSSH.adoc:582", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 163, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 58, "source_unit": "https://translate.fedoraproject.org/api/units/899559/?format=api", "priority": 100, "id": 9475905, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=63ae7f666359dbdc", "url": "https://translate.fedoraproject.org/api/units/9475905/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.495365Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "For example:" ], "previous_source": "", "target": [ "" ], "id_hash": -3643751247835186919, "content_hash": -3643751247835186919, "location": "pages/infrastructure-services/OpenSSH.adoc:584", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 164, "has_suggestion": true, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate.fedoraproject.org/api/units/899563/?format=api", "priority": 100, "id": 9475906, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=4d6ecb8ba6e5b919", "url": "https://translate.fedoraproject.org/api/units/9475906/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.500128Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# ssh-keygen -s ~/.ssh/ca_host_key -I host_name -h -n host_name.example.com -V -1w:+54w5d /etc/ssh/ssh_host_rsa.pub\nEnter passphrase:\nSigned host key /root/.ssh/ssh_host_rsa-cert.pub: id \"host_name\" serial 0 for host_name.example.com valid from 2015-05-15T13:52:29 to 2016-06-08T13:52:29\n" ], "previous_source": "", "target": [ "" ], "id_hash": 2880580515380290911, "content_hash": 2880580515380290911, "location": "pages/infrastructure-services/OpenSSH.adoc:589", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 165, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate.fedoraproject.org/api/units/899567/?format=api", "priority": 100, "id": 9475907, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=a7f9e0b77e27655f", "url": "https://translate.fedoraproject.org/api/units/9475907/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.504756Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Distributing and Trusting SSH CA Public Keys" ], "previous_source": "", "target": [ "" ], "id_hash": 6872425695605747360, "content_hash": 6872425695605747360, "location": "pages/infrastructure-services/OpenSSH.adoc:592", "context": "", "note": "type: Title =====", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 166, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/899571/?format=api", "priority": 100, "id": 9475908, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=df5fc2c22bd8eea0", "url": "https://translate.fedoraproject.org/api/units/9475908/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.509067Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Hosts that are to allow certificate authenticated log in from users must be configured to trust the CA's public key that was used to sign the user certificates, in order to authenticate user's certificates. In this example that is the `ca_user_key.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": -22891256906980289, "content_hash": -22891256906980289, "location": "pages/infrastructure-services/OpenSSH.adoc:595", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 167, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 41, "source_unit": "https://translate.fedoraproject.org/api/units/899575/?format=api", "priority": 100, "id": 9475909, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=7faeac85eb98e43f", "url": "https://translate.fedoraproject.org/api/units/9475909/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.513181Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Publish the `ca_user_key.pub` key and download it to all hosts that are required to allow remote users to log in. Alternately, copy the CA user public key to all the hosts. In a production environment, consider copying the public key to an administrator account first. The secure copy command can be used to copy the public key to remote hosts. The command has the following format:" ], "previous_source": "", "target": [ "" ], "id_hash": 1503754723105098281, "content_hash": 1503754723105098281, "location": "pages/infrastructure-services/OpenSSH.adoc:597", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 168, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 66, "source_unit": "https://translate.fedoraproject.org/api/units/899579/?format=api", "priority": 100, "id": 9475910, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=94de68f413feca29", "url": "https://translate.fedoraproject.org/api/units/9475910/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.516476Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "scp ~/.ssh/ca_user_key.pub root@pass:quotes[_host_name_].example.com:/etc/ssh/\n" ], "previous_source": "", "target": [ "" ], "id_hash": -3642211521026008103, "content_hash": -3642211521026008103, "location": "pages/infrastructure-services/OpenSSH.adoc:601", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 169, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/899582/?format=api", "priority": 100, "id": 9475911, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=4d7443eb3c68dbd9", "url": "https://translate.fedoraproject.org/api/units/9475911/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.519691Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Where _host_name_ is the host name of a server the is required to authenticate user's certificates presented during the login process. Ensure you copy the public key not the private key. For example, as `root`:" ], "previous_source": "", "target": [ "" ], "id_hash": 3305908582294539546, "content_hash": 3305908582294539546, "location": "pages/infrastructure-services/OpenSSH.adoc:604", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 170, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 35, "source_unit": "https://translate.fedoraproject.org/api/units/899586/?format=api", "priority": 100, "id": 9475912, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=ade0f2571394cd1a", "url": "https://translate.fedoraproject.org/api/units/9475912/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.522822Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# scp ~/.ssh/ca_user_key.pub root@host_name.example.com:/etc/ssh/\nThe authenticity of host 'host_name.example.com (10.34.74.56)' can't be established.\nRSA key fingerprint is fc:23:ad:ae:10:6f:d1:a1:67:ee:b1:d5:37:d4:b0:2f.\nAre you sure you want to continue connecting (yes/no)? yes\nWarning: Permanently added 'host_name.example.com,10.34.74.56' (RSA) to the list of known hosts.\nroot@host_name.example.com's password:\nca_user_key.pub 100% 420 0.4KB/s 00:00\n" ], "previous_source": "", "target": [ "" ], "id_hash": 2727833640137222204, "content_hash": 2727833640137222204, "location": "pages/infrastructure-services/OpenSSH.adoc:613", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 171, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/899588/?format=api", "priority": 100, "id": 9475913, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=a5db363e36bd683c", "url": "https://translate.fedoraproject.org/api/units/9475913/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.525745Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "For remote user authentication, CA keys can be marked as trusted per-user in the `~/.ssh/authorized_keys` file using the [command]#cert-authority# directive or for global use by means of the [command]#TrustedUserCAKeys# directive in the `/etc/ssh/sshd_config` file. For remote host authentication, CA keys can be marked as trusted globally in the `/etc/ssh/known_hosts` file or per-user in the `~/.ssh/ssh_known_hosts` file." ], "previous_source": "", "target": [ "" ], "id_hash": 3355358927895020448, "content_hash": 3355358927895020448, "location": "pages/infrastructure-services/OpenSSH.adoc:616", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 172, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 56, "source_unit": "https://translate.fedoraproject.org/api/units/899590/?format=api", "priority": 100, "id": 9475914, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=ae90a12adf1e43a0", "url": "https://translate.fedoraproject.org/api/units/9475914/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.528440Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Trusting the User Signing Key" ], "previous_source": "", "target": [ "" ], "id_hash": -8052786932470513523, "content_hash": -8052786932470513523, "location": "pages/infrastructure-services/OpenSSH.adoc:618", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 173, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/899592/?format=api", "priority": 100, "id": 9475915, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=103ec0f34e30008d", "url": "https://translate.fedoraproject.org/api/units/9475915/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.531135Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "For user certificates which have one or more principles listed, and where the setting is to have global effect, edit the `/etc/ssh/sshd_config` file as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": -4018104024225686522, "content_hash": -4018104024225686522, "location": "pages/infrastructure-services/OpenSSH.adoc:620", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 174, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 25, "source_unit": "https://translate.fedoraproject.org/api/units/899594/?format=api", "priority": 100, "id": 9475916, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=483cd3adc575dc06", "url": "https://translate.fedoraproject.org/api/units/9475916/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.533698Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "TrustedUserCAKeys /etc/ssh/ca_user_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 3326199101945804515, "content_hash": 3326199101945804515, "location": "pages/infrastructure-services/OpenSSH.adoc:623", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 175, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate.fedoraproject.org/api/units/899596/?format=api", "priority": 100, "id": 9475917, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=ae290875d3b3f6e3", "url": "https://translate.fedoraproject.org/api/units/9475917/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.536225Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Restart `sshd` to make the changes take effect:" ], "previous_source": "", "target": [ "" ], "id_hash": -3600691623735195513, "content_hash": -3600691623735195513, "location": "pages/infrastructure-services/OpenSSH.adoc:626", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 176, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 8, "source_unit": "https://translate.fedoraproject.org/api/units/899598/?format=api", "priority": 100, "id": 9475918, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=4e07c60ba58a0887", "url": "https://translate.fedoraproject.org/api/units/9475918/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.538590Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# service sshd restart\n" ], "previous_source": "", "target": [ "" ], "id_hash": -4808041200648062734, "content_hash": -4808041200648062734, "location": "pages/infrastructure-services/OpenSSH.adoc:629", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 177, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/899600/?format=api", "priority": 100, "id": 9475919, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=3d46680089edf8f2", "url": "https://translate.fedoraproject.org/api/units/9475919/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.541025Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "To avoid being presented with the warning about an unknown host, a user's system must trust the CA's public key that was used to sign the host certificates. In this example that is `ca_host_key.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": -7442281670338817679, "content_hash": -7442281670338817679, "location": "pages/infrastructure-services/OpenSSH.adoc:632", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 178, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 34, "source_unit": "https://translate.fedoraproject.org/api/units/899602/?format=api", "priority": 100, "id": 9475920, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=18b7b440710dd171", "url": "https://translate.fedoraproject.org/api/units/9475920/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.543225Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Trusting the Host Signing Key" ], "previous_source": "", "target": [ "" ], "id_hash": 8881275522096958850, "content_hash": 8881275522096958850, "location": "pages/infrastructure-services/OpenSSH.adoc:634", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 179, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/899604/?format=api", "priority": 100, "id": 9475921, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=fb40a10846f60d82", "url": "https://translate.fedoraproject.org/api/units/9475921/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.545523Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Extract the contents of the public key used to sign the host certificate. For example, on the CA:" ], "previous_source": "", "target": [ "" ], "id_hash": 1666541473212174740, "content_hash": 1666541473212174740, "location": "pages/infrastructure-services/OpenSSH.adoc:636", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 180, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 18, "source_unit": "https://translate.fedoraproject.org/api/units/899606/?format=api", "priority": 100, "id": 9475922, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=9720bea3e2449194", "url": "https://translate.fedoraproject.org/api/units/9475922/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.547578Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "cat ~/.ssh/ca_host_key.pub\nssh-rsa pass:quotes[_AAAAB5Wm._]== root@ca-server.example.com\n" ], "previous_source": "", "target": [ "" ], "id_hash": -9207290092019541174, "content_hash": -9207290092019541174, "location": "pages/infrastructure-services/OpenSSH.adoc:641", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 181, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/899608/?format=api", "priority": 100, "id": 9475923, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=0039227191339b4a", "url": "https://translate.fedoraproject.org/api/units/9475923/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.549787Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "To configure client systems to trust servers' signed host certificates, add the contents of the `ca_host_key.pub` into the global `known_hosts` file. This will automatically check a server's host advertised certificate against the CA public key for all users every time a new machine is connected to in the domain `*.example.com`. Login as `root` and configure the `/etc/ssh/ssh_known_hosts` file, as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": 3244899416033123796, "content_hash": 3244899416033123796, "location": "pages/infrastructure-services/OpenSSH.adoc:644", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 182, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 60, "source_unit": "https://translate.fedoraproject.org/api/units/899610/?format=api", "priority": 100, "id": 9475924, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=ad0832d3a086ddd4", "url": "https://translate.fedoraproject.org/api/units/9475924/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.552021Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# vi /etc/ssh/ssh_known_hosts\n# A CA key, accepted for any host in *.example.com\n@cert-authority *.example.com ssh-rsa pass:quotes[_AAAAB5Wm._]\n" ], "previous_source": "", "target": [ "" ], "id_hash": -3163044009712318393, "content_hash": -3163044009712318393, "location": "pages/infrastructure-services/OpenSSH.adoc:650", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 183, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 17, "source_unit": "https://translate.fedoraproject.org/api/units/899612/?format=api", "priority": 100, "id": 9475925, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=541a9c3b502b8847", "url": "https://translate.fedoraproject.org/api/units/9475925/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.554280Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Where `ssh-rsa _AAAAB5Wm._pass:attributes[{blank}]` is the contents of `ca_host_key.pub`. The above configures the system to trust the CA servers host public key. This enables global authentication of the certificates presented by hosts to remote users." ], "previous_source": "", "target": [ "" ], "id_hash": 6618392792553376760, "content_hash": 6618392792553376760, "location": "pages/infrastructure-services/OpenSSH.adoc:653", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 184, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 34, "source_unit": "https://translate.fedoraproject.org/api/units/899614/?format=api", "priority": 100, "id": 9475926, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=dbd9412dd8264bf8", "url": "https://translate.fedoraproject.org/api/units/9475926/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.556060Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Creating SSH Certificates" ], "previous_source": "", "target": [ "" ], "id_hash": -4513075604629555691, "content_hash": -4513075604629555691, "location": "pages/infrastructure-services/OpenSSH.adoc:655", "context": "", "note": "type: Title =====", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 185, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/899616/?format=api", "priority": 100, "id": 9475927, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=415e55a61d92f615", "url": "https://translate.fedoraproject.org/api/units/9475927/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.558012Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "A certifcate is a signed public key. The user's and host's public keys must be copied to the CA server for signing by the CA server's private key." ], "previous_source": "", "target": [ "" ], "id_hash": -6314941917788238280, "content_hash": -6314941917788238280, "location": "pages/infrastructure-services/OpenSSH.adoc:658", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 186, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 28, "source_unit": "https://translate.fedoraproject.org/api/units/899618/?format=api", "priority": 100, "id": 9475928, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=285cd1c8a5020e38", "url": "https://translate.fedoraproject.org/api/units/9475928/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.560094Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Copying many keys to the CA to be signed can create confusion if they are not uniquely named. If the default name is always used then the latest key to be copied will overwrite the previously copied key, which may be an acceptable method for one administrator. In the example below the default name is used. In a production environment, consider using easily recognizable names. It is recommend to have a designated directory on the CA server owned by an administrative user for the keys to be copied into. Copying these keys to the `root` user's `/etc/ssh/` directory is not recommend. In the examples below an account named `admin` with a directory named `keys/` will be used." ], "previous_source": "", "target": [ "" ], "id_hash": 4925376788115266872, "content_hash": 4925376788115266872, "location": "pages/infrastructure-services/OpenSSH.adoc:663", "context": "", "note": "type: delimited block =", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 187, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 117, "source_unit": "https://translate.fedoraproject.org/api/units/899620/?format=api", "priority": 100, "id": 9475929, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=c45a7417d0909d38", "url": "https://translate.fedoraproject.org/api/units/9475929/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.562436Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Create an administrator account, in this example `admin`, and a directory to receive the user's keys. For example:" ], "previous_source": "", "target": [ "" ], "id_hash": 3122831281519296648, "content_hash": 3122831281519296648, "location": "pages/infrastructure-services/OpenSSH.adoc:667", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 188, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 18, "source_unit": "https://translate.fedoraproject.org/api/units/899622/?format=api", "priority": 100, "id": 9475930, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=ab5686814c6f8088", "url": "https://translate.fedoraproject.org/api/units/9475930/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.564966Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]$ [command]#mkdir keys#\n" ], "previous_source": "", "target": [ "" ], "id_hash": -7784680188272738234, "content_hash": -7784680188272738234, "location": "pages/infrastructure-services/OpenSSH.adoc:671", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 189, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/899624/?format=api", "priority": 100, "id": 9475931, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=13f7429d1ffb8046", "url": "https://translate.fedoraproject.org/api/units/9475931/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.567255Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Set the permissions to allow keys to be copied in:" ], "previous_source": "", "target": [ "" ], "id_hash": 8744194619115921281, "content_hash": 8744194619115921281, "location": "pages/infrastructure-services/OpenSSH.adoc:674", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 190, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 10, "source_unit": "https://translate.fedoraproject.org/api/units/899626/?format=api", "priority": 100, "id": 9475932, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=f9599ead67495f81", "url": "https://translate.fedoraproject.org/api/units/9475932/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.570219Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]$ chmod o+w keys\nls -la keys\ntotal 8\ndrwxrwxrwx. 2 admin admin 4096 May 22 16:17 .\ndrwx------. 3 admin admin 4096 May 22 16:17 ..\n" ], "previous_source": "", "target": [ "" ], "id_hash": 2412464309427999281, "content_hash": 2412464309427999281, "location": "pages/infrastructure-services/OpenSSH.adoc:681", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 191, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 27, "source_unit": "https://translate.fedoraproject.org/api/units/899628/?format=api", "priority": 100, "id": 9475933, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=a17acb81f4c39231", "url": "https://translate.fedoraproject.org/api/units/9475933/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.574170Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "====== Creating SSH Certificates to Authenticate Hosts" ], "previous_source": "", "target": [ "" ], "id_hash": 7523617129172287569, "content_hash": 7523617129172287569, "location": "pages/infrastructure-services/OpenSSH.adoc:685", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 192, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/899630/?format=api", "priority": 100, "id": 9475934, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=e86941eaca5bc051", "url": "https://translate.fedoraproject.org/api/units/9475934/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.578466Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "The command to sign a host certificate has the following format:" ], "previous_source": "", "target": [ "" ], "id_hash": 5993158508251814751, "content_hash": 5993158508251814751, "location": "pages/infrastructure-services/OpenSSH.adoc:687", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 193, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 11, "source_unit": "https://translate.fedoraproject.org/api/units/899632/?format=api", "priority": 100, "id": 9475935, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=d32bf9e8fef59b5f", "url": "https://translate.fedoraproject.org/api/units/9475935/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.583007Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "ssh-keygen -s ca_host_key -I pass:quotes[_host_name_] -h ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 822101195683042849, "content_hash": 822101195683042849, "location": "pages/infrastructure-services/OpenSSH.adoc:691", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 194, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/899634/?format=api", "priority": 100, "id": 9475936, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=8b68b0ae8a1c9621", "url": "https://translate.fedoraproject.org/api/units/9475936/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.586276Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "The host certificate will named `ssh_host_rsa_key-cert.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": 4122998010648860534, "content_hash": 4122998010648860534, "location": "pages/infrastructure-services/OpenSSH.adoc:694", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 195, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/899636/?format=api", "priority": 100, "id": 9475937, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=b937d4d89a5e1776", "url": "https://translate.fedoraproject.org/api/units/9475937/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.589517Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Generating a Host Certificate" ], "previous_source": "", "target": [ "" ], "id_hash": 3607541174486540202, "content_hash": 3607541174486540202, "location": "pages/infrastructure-services/OpenSSH.adoc:696", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 196, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/899638/?format=api", "priority": 100, "id": 9475938, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=b2108f95a9dd9faa", "url": "https://translate.fedoraproject.org/api/units/9475938/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.593710Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "To authenticate a host to a user, a public key must be generated on the host, passed to the CA server, signed by the CA, and then passed back to be stored on the host to present to a user attempting to log into the host." ], "previous_source": "", "target": [ "" ], "id_hash": -8222862438683991045, "content_hash": -8222862438683991045, "location": "pages/infrastructure-services/OpenSSH.adoc:698", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 197, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/899640/?format=api", "priority": 100, "id": 9475939, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=0de2862db956a3fb", "url": "https://translate.fedoraproject.org/api/units/9475939/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.598311Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Host keys are generated automatically on the system. To list them enter the following command:" ], "previous_source": "", "target": [ "" ], "id_hash": 2981851149071465219, "content_hash": 2981851149071465219, "location": "pages/infrastructure-services/OpenSSH.adoc:700", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 198, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 15, "source_unit": "https://translate.fedoraproject.org/api/units/899642/?format=api", "priority": 100, "id": 9475940, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=a961a9d2517ebb03", "url": "https://translate.fedoraproject.org/api/units/9475940/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.602213Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# ls -l /etc/ssh/ssh_host*\n-rw-------. 1 root root 668 May 6 14:38 /etc/ssh/ssh_host_dsa_key\n-rw-r--r--. 1 root root 590 May 6 14:38 /etc/ssh/ssh_host_dsa_key.pub\n-rw-------. 1 root root 963 May 6 14:38 /etc/ssh/ssh_host_key\n-rw-r--r--. 1 root root 627 May 6 14:38 /etc/ssh/ssh_host_key.pub\n-rw-------. 1 root root 1679 May 6 14:38 /etc/ssh/ssh_host_rsa_key\n-rw-r--r--. 1 root root 382 May 6 14:38 /etc/ssh/ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": -204958763796473554, "content_hash": -204958763796473554, "location": "pages/infrastructure-services/OpenSSH.adoc:709", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 199, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 58, "source_unit": "https://translate.fedoraproject.org/api/units/899644/?format=api", "priority": 100, "id": 9475941, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=7d27d7171a4ed92e", "url": "https://translate.fedoraproject.org/api/units/9475941/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.605904Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Copy the chosen public key to the server designated as the CA. For example, from the host:" ], "previous_source": "", "target": [ "" ], "id_hash": 2869199336477116098, "content_hash": 2869199336477116098, "location": "pages/infrastructure-services/OpenSSH.adoc:712", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 200, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 17, "source_unit": "https://translate.fedoraproject.org/api/units/899646/?format=api", "priority": 100, "id": 9475942, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=a7d17198488146c2", "url": "https://translate.fedoraproject.org/api/units/9475942/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.609878Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# scp /etc/ssh/ssh_host_rsa_key.pub admin@ca-server.example.com:~/keys/ssh_host_rsa_key.pub\nThe authenticity of host 'ca-server.example.com (10.34.74.58)' can't be established.\nRSA key fingerprint is b0:e5:ea:b8:75:e2:f0:b1:fe:5b:07:39:7f:58:64:d9.\nAre you sure you want to continue connecting (yes/no)? yes\nWarning: Permanently added 'ca-server.example.com,10.34.74.58' (RSA) to the list of known hosts.\nadmin@ca-server.example.com's password:\nssh_host_rsa_key.pub 100% 382 0.4KB/s 00:00\n" ], "previous_source": "", "target": [ "" ], "id_hash": 7582618923056680618, "content_hash": 7582618923056680618, "location": "pages/infrastructure-services/OpenSSH.adoc:721", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 201, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/899648/?format=api", "priority": 100, "id": 9475943, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=e93adfbc6ff2ceaa", "url": "https://translate.fedoraproject.org/api/units/9475943/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.613450Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Alternately, from the CA:" ], "previous_source": "", "target": [ "" ], "id_hash": 6035717800660344033, "content_hash": 6035717800660344033, "location": "pages/infrastructure-services/OpenSSH.adoc:724", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 202, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/899650/?format=api", "priority": 100, "id": 9475944, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=d3c32d5c70dc9ce1", "url": "https://translate.fedoraproject.org/api/units/9475944/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.616612Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]$ scp root@host_name.example.com:/etc/ssh/ssh_host_rsa_key.pub ~/keys/ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": -212577568524698132, "content_hash": -212577568524698132, "location": "pages/infrastructure-services/OpenSSH.adoc:727", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 203, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/899652/?format=api", "priority": 100, "id": 9475945, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=7d0cc5d3e4de7dec", "url": "https://translate.fedoraproject.org/api/units/9475945/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.620460Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "On the CA server, sign the host's public key. For example, as `root`:" ], "previous_source": "", "target": [ "" ], "id_hash": -4489354168789479287, "content_hash": -4489354168789479287, "location": "pages/infrastructure-services/OpenSSH.adoc:730", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 204, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 13, "source_unit": "https://translate.fedoraproject.org/api/units/899654/?format=api", "priority": 100, "id": 9475946, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=41b29c2b4a625089", "url": "https://translate.fedoraproject.org/api/units/9475946/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.624257Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "~]# ssh-keygen -s ~/.ssh/ca_host_key -I host_name -h -n host_name.example.com -V -1d:+54w /home/admin/keys/ssh_host_rsa_key.pub\nEnter passphrase:\nSigned host key /home/admin/keys/ssh_host_rsa_key-cert.pub: id \"host_name\" serial 0 for host_name.example.com valid from 2015-05-26T12:21:54 to 2016-06-08T12:21:54\n" ], "previous_source": "", "target": [ "" ], "id_hash": -4897533217880772689, "content_hash": -4897533217880772689, "location": "pages/infrastructure-services/OpenSSH.adoc:735", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 205, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate.fedoraproject.org/api/units/899656/?format=api", "priority": 100, "id": 9475947, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=3c08777c908a6faf", "url": "https://translate.fedoraproject.org/api/units/9475947/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.628306Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?format=api", "source": [ "Where _host_name_ is the host name of the system requiring the certificate." ], "previous_source": "", "target": [ "" ], "id_hash": -2196293630882737562, "content_hash": -2196293630882737562, "location": "pages/infrastructure-services/OpenSSH.adoc:738", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 206, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 12, "source_unit": "https://translate.fedoraproject.org/api/units/899658/?format=api", "priority": 100, "id": 9475948, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f26pagesinfrastructure-servicesopenssh/ru/?checksum=6185329444c81266", "url": "https://translate.fedoraproject.org/api/units/9475948/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2022-02-04T18:05:44.632416Z" } ] }