Units
Translation components API.
See the Weblate's Web API documentation for detailed description of the API.
GET /api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/units/?format=api&page=4
{ "count": 369, "next": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/units/?format=api&page=5", "previous": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/units/?format=api&page=3", "results": [ { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Generating SSH CA Certificate Signing Keys" ], "previous_source": "", "target": [ "" ], "id_hash": -4413744414182886436, "content_hash": -4413744414182886436, "location": "./pages/infrastructure-services/OpenSSH.adoc:499", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 151, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/15730454/?format=api", "priority": 100, "id": 17122851, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=42bf3ad71f43b3dc", "url": "https://translate.fedoraproject.org/api/units/17122851/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.459091Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "On the server designated to be the CA, generate two keys for use in signing certificates. These are the keys that all other hosts need to trust. Choose suitable names, for example `ca_user_key` and `ca_host_key`. To generate the user certificate signing key, enter the following command as `root`:" ], "previous_source": "", "target": [ "" ], "id_hash": -8969664255905677960, "content_hash": -8969664255905677960, "location": "./pages/infrastructure-services/OpenSSH.adoc:501", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 152, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 48, "source_unit": "https://translate.fedoraproject.org/api/units/15730455/?format=api", "priority": 100, "id": 17122852, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=038559e1f0393d78", "url": "https://translate.fedoraproject.org/api/units/17122852/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.466394Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]# ssh-keygen -t rsa -f ~/.ssh/ca_user_key\nGenerating public/private rsa key pair.\nCreated directory '/root/.ssh'.\nEnter passphrase (empty for no passphrase):\nEnter same passphrase again:\nYour identification has been saved in /root/.ssh/ca_user_key.\nYour public key has been saved in /root/.ssh/ca_user_key.pub.\nThe key fingerprint is:\nSHA256:y6f0DGlHe28YWotEypnhfk3WLYQ5TgaQwoSlOFwmmm0 root@host_name.example.com\nThe key's randomart image is:\n+--[ RSA 2048]----+\n| .+. o|\n| . o +.|\n| o + . . o|\n| o + . . ..|\n| S . ... *|\n| . . . .*.|\n| = E .. |\n| . o . |\n| . |\n+-----------------+\n" ], "previous_source": "", "target": [ "" ], "id_hash": -2930401736626670656, "content_hash": -2930401736626670656, "location": "./pages/infrastructure-services/OpenSSH.adoc:524", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 153, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 96, "source_unit": "https://translate.fedoraproject.org/api/units/15730456/?format=api", "priority": 100, "id": 17122853, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=57551f257f2df3c0", "url": "https://translate.fedoraproject.org/api/units/17122853/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.474236Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Generate a host certificate signing key, `ca_host_key`, as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": 9213302060273904066, "content_hash": 9213302060273904066, "location": "./pages/infrastructure-services/OpenSSH.adoc:527", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 154, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/15730457/?format=api", "priority": 100, "id": 17122854, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=ffdc3968df0029c2", "url": "https://translate.fedoraproject.org/api/units/17122854/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.482338Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]# ssh-keygen -t rsa -f ~/.ssh/ca_host_key\nGenerating public/private rsa key pair.\nEnter passphrase (empty for no passphrase):\nEnter same passphrase again:\nYour identification has been saved in /root/.ssh/ca_host_key.\nYour public key has been saved in /root/.ssh/ca_host_key.pub.\nThe key fingerprint is:\nSHA256:y6f0DGlHe28YWotEypnhfk3WLYQ5TgaQwoSlOFwmmm0 root@host_name.example.com\nThe key's randomart image is:\n+--[ RSA 2048]----+\n| .. |\n| . ....|\n| . . o +oo|\n| o . o *o|\n| S = .|\n| o. .|\n| *.E. |\n| +o= |\n| .oo. |\n+-----------------+\n" ], "previous_source": "", "target": [ "" ], "id_hash": -8707037710053709130, "content_hash": -8707037710053709130, "location": "./pages/infrastructure-services/OpenSSH.adoc:549", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 155, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 83, "source_unit": "https://translate.fedoraproject.org/api/units/15730458/?format=api", "priority": 100, "id": 17122855, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=072a6355a6516ab6", "url": "https://translate.fedoraproject.org/api/units/17122855/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.489589Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "If required, confirm the permissions are correct:" ], "previous_source": "", "target": [ "" ], "id_hash": -1869566723555367932, "content_hash": -1869566723555367932, "location": "./pages/infrastructure-services/OpenSSH.adoc:552", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 156, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/15730459/?format=api", "priority": 100, "id": 17122856, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=660df6f866976404", "url": "https://translate.fedoraproject.org/api/units/17122856/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.498077Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]# ls -la ~/.ssh\ntotal 40\ndrwxrwxrwx. 2 root root 4096 May 22 13:18 .\ndr-xr-x---. 3 root root 4096 May 8 08:34 ..\n-rw-------. 1 root root 1743 May 22 13:15 ca_host_key\n-rw-r--r--. 1 root root 420 May 22 13:15 ca_host_key.pub\n-rw-------. 1 root root 1743 May 22 13:14 ca_user_key\n-rw-r--r--. 1 root root 420 May 22 13:14 ca_user_key.pub\n-rw-r--r--. 1 root root 854 May 8 05:55 known_hosts\n-r--------. 1 root root 1671 May 6 17:13 ssh_host_rsa\n-rw-r--r--. 1 root root 1370 May 7 14:30 ssh_host_rsa-cert.pub\n-rw-------. 1 root root 420 May 6 17:13 ssh_host_rsa.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 9209061002961107602, "content_hash": 9209061002961107602, "location": "./pages/infrastructure-services/OpenSSH.adoc:566", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 157, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 96, "source_unit": "https://translate.fedoraproject.org/api/units/15730460/?format=api", "priority": 100, "id": 17122857, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=ffcd2830c4663a92", "url": "https://translate.fedoraproject.org/api/units/17122857/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.505881Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Create the CA server's own host certificate by signing the server's host public key together with an identification string such as the host name, the CA server's _fully qualified domain name_ (*FQDN*) but without the trailing `.`, and a validity period. The command takes the following form:" ], "previous_source": "", "target": [ "" ], "id_hash": -825133634962011410, "content_hash": -825133634962011410, "location": "./pages/infrastructure-services/OpenSSH.adoc:569", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 158, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 47, "source_unit": "https://translate.fedoraproject.org/api/units/15730461/?format=api", "priority": 100, "id": 17122858, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=748c8954abdccaee", "url": "https://translate.fedoraproject.org/api/units/17122858/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.513145Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "ssh-keygen -s ~/.ssh/ca_host_key -I pass:quotes[_certificate_ID_] -h -n pass:quotes[_host_name.example.com_] -V pass:quotes[_-start:+end_] /etc/ssh/ssh_host_rsa.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 5346577250639073187, "content_hash": 5346577250639073187, "location": "./pages/infrastructure-services/OpenSSH.adoc:573", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 159, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 11, "source_unit": "https://translate.fedoraproject.org/api/units/15730462/?format=api", "priority": 100, "id": 17122859, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=ca32dbae9c86cfa3", "url": "https://translate.fedoraproject.org/api/units/17122859/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.521254Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "The [option]`-n` option restricts this certificate to a specific host within the domain. The [option]`-V` option is for adding a validity period; this is highly recommend. Where the validity period is intended to be one year, fifty two weeks, consider the need for time to change the certificates and any holiday periods around the time of certificate expiry." ], "previous_source": "", "target": [ "" ], "id_hash": -2040553503422030884, "content_hash": -2040553503422030884, "location": "./pages/infrastructure-services/OpenSSH.adoc:576", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 160, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 58, "source_unit": "https://translate.fedoraproject.org/api/units/15730463/?format=api", "priority": 100, "id": 17122860, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=63ae7f666359dbdc", "url": "https://translate.fedoraproject.org/api/units/17122860/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.527474Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "For example:" ], "previous_source": "", "target": [ "" ], "id_hash": -3643751247835186919, "content_hash": -3643751247835186919, "location": "./pages/infrastructure-services/OpenSSH.adoc:578", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 161, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate.fedoraproject.org/api/units/15730464/?format=api", "priority": 100, "id": 17122861, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=4d6ecb8ba6e5b919", "url": "https://translate.fedoraproject.org/api/units/17122861/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.534001Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]# ssh-keygen -s ~/.ssh/ca_host_key -I host_name -h -n host_name.example.com -V -1w:+54w5d /etc/ssh/ssh_host_rsa.pub\nEnter passphrase:\nSigned host key /root/.ssh/ssh_host_rsa-cert.pub: id \"host_name\" serial 0 for host_name.example.com valid from 2020-05-15T13:52:29 to 2021-06-08T13:52:29\n" ], "previous_source": "", "target": [ "" ], "id_hash": -6014358302518747524, "content_hash": -6014358302518747524, "location": "./pages/infrastructure-services/OpenSSH.adoc:583", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 162, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 29, "source_unit": "https://translate.fedoraproject.org/api/units/15730465/?format=api", "priority": 100, "id": 17122862, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=2c88b4fd4272de7c", "url": "https://translate.fedoraproject.org/api/units/17122862/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.539848Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Distributing and Trusting SSH CA Public Keys" ], "previous_source": "", "target": [ "" ], "id_hash": 6872425695605747360, "content_hash": 6872425695605747360, "location": "./pages/infrastructure-services/OpenSSH.adoc:586", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 163, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/15730466/?format=api", "priority": 100, "id": 17122863, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=df5fc2c22bd8eea0", "url": "https://translate.fedoraproject.org/api/units/17122863/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.545712Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Hosts that are to allow certificate authenticated log in from users must be configured to trust the CA's public key that was used to sign the user certificates, in order to authenticate user's certificates. In this example that is the `ca_user_key.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": -22891256906980289, "content_hash": -22891256906980289, "location": "./pages/infrastructure-services/OpenSSH.adoc:589", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 164, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 41, "source_unit": "https://translate.fedoraproject.org/api/units/15730467/?format=api", "priority": 100, "id": 17122864, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=7faeac85eb98e43f", "url": "https://translate.fedoraproject.org/api/units/17122864/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.550917Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Publish the `ca_user_key.pub` key and download it to all hosts that are required to allow remote users to log in. Alternately, copy the CA user public key to all the hosts. In a production environment, consider copying the public key to an administrator account first. The secure copy command can be used to copy the public key to remote hosts. The command has the following format:" ], "previous_source": "", "target": [ "" ], "id_hash": 1503754723105098281, "content_hash": 1503754723105098281, "location": "./pages/infrastructure-services/OpenSSH.adoc:591", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 165, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 66, "source_unit": "https://translate.fedoraproject.org/api/units/15730468/?format=api", "priority": 100, "id": 17122865, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=94de68f413feca29", "url": "https://translate.fedoraproject.org/api/units/17122865/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.556360Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "scp ~/.ssh/ca_user_key.pub root@pass:quotes[_host_name_].example.com:/etc/ssh/\n" ], "previous_source": "", "target": [ "" ], "id_hash": -3642211521026008103, "content_hash": -3642211521026008103, "location": "./pages/infrastructure-services/OpenSSH.adoc:595", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 166, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/15730469/?format=api", "priority": 100, "id": 17122866, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=4d7443eb3c68dbd9", "url": "https://translate.fedoraproject.org/api/units/17122866/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.561936Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Where _host_name_ is the host name of a server the is required to authenticate user's certificates presented during the login process. Ensure you copy the public key not the private key. For example, as `root`:" ], "previous_source": "", "target": [ "" ], "id_hash": 3305908582294539546, "content_hash": 3305908582294539546, "location": "./pages/infrastructure-services/OpenSSH.adoc:598", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 167, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 35, "source_unit": "https://translate.fedoraproject.org/api/units/15730470/?format=api", "priority": 100, "id": 17122867, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=ade0f2571394cd1a", "url": "https://translate.fedoraproject.org/api/units/17122867/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.567214Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]# scp ~/.ssh/ca_user_key.pub root@host_name.example.com:/etc/ssh/\nThe authenticity of host 'host_name.example.com (10.34.74.56)' can't be established.\nECDSA key fingerprint is SHA256:ZYEUaevOAEASvYjm58PiPdMebxhhlaTZBjTMr/N2I3c.\nAre you sure you want to continue connecting (yes/no/[fingerprint])? yes\nWarning: Permanently added 'host_name.example.com,10.34.74.56' (ECDSA) to the list of known hosts.\nroot@host_name.example.com's password:\nca_user_key.pub 100% 420 0.4KB/s 00:00\n" ], "previous_source": "", "target": [ "" ], "id_hash": 5469008864423607949, "content_hash": 5469008864423607949, "location": "./pages/infrastructure-services/OpenSSH.adoc:607", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 168, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/15730471/?format=api", "priority": 100, "id": 17122868, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=cbe5d2960d6e7e8d", "url": "https://translate.fedoraproject.org/api/units/17122868/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.572256Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "For remote user authentication, CA keys can be marked as trusted per-user in the `~/.ssh/authorized_keys` file using the [command]#cert-authority# directive or for global use by means of the [command]#TrustedUserCAKeys# directive in the `/etc/ssh/sshd_config` file. For remote host authentication, CA keys can be marked as trusted globally in the `/etc/ssh/known_hosts` file or per-user in the `~/.ssh/ssh_known_hosts` file." ], "previous_source": "", "target": [ "" ], "id_hash": 3355358927895020448, "content_hash": 3355358927895020448, "location": "./pages/infrastructure-services/OpenSSH.adoc:610", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 169, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 56, "source_unit": "https://translate.fedoraproject.org/api/units/15730472/?format=api", "priority": 100, "id": 17122869, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=ae90a12adf1e43a0", "url": "https://translate.fedoraproject.org/api/units/17122869/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.577342Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Trusting the User Signing Key" ], "previous_source": "", "target": [ "" ], "id_hash": -8052786932470513523, "content_hash": -8052786932470513523, "location": "./pages/infrastructure-services/OpenSSH.adoc:612", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 170, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/15730473/?format=api", "priority": 100, "id": 17122870, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=103ec0f34e30008d", "url": "https://translate.fedoraproject.org/api/units/17122870/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.582766Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "For user certificates which have one or more principles listed, and where the setting is to have global effect, edit the `/etc/ssh/sshd_config` file as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": -4018104024225686522, "content_hash": -4018104024225686522, "location": "./pages/infrastructure-services/OpenSSH.adoc:614", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 171, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 25, "source_unit": "https://translate.fedoraproject.org/api/units/15730474/?format=api", "priority": 100, "id": 17122871, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=483cd3adc575dc06", "url": "https://translate.fedoraproject.org/api/units/17122871/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.587314Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "TrustedUserCAKeys /etc/ssh/ca_user_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 3326199101945804515, "content_hash": 3326199101945804515, "location": "./pages/infrastructure-services/OpenSSH.adoc:617", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 172, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate.fedoraproject.org/api/units/15730475/?format=api", "priority": 100, "id": 17122872, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=ae290875d3b3f6e3", "url": "https://translate.fedoraproject.org/api/units/17122872/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.591875Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Restart `sshd` to make the changes take effect:" ], "previous_source": "", "target": [ "" ], "id_hash": -3600691623735195513, "content_hash": -3600691623735195513, "location": "./pages/infrastructure-services/OpenSSH.adoc:620, ./pages/infrastructure-services/OpenSSH.adoc:748", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 173, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 8, "source_unit": "https://translate.fedoraproject.org/api/units/15730476/?format=api", "priority": 100, "id": 17122873, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=4e07c60ba58a0887", "url": "https://translate.fedoraproject.org/api/units/17122873/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.596570Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]#{nbsp}systemctl restart sshd.service\n" ], "previous_source": "", "target": [ "" ], "id_hash": 8393605931413592967, "content_hash": 8393605931413592967, "location": "./pages/infrastructure-services/OpenSSH.adoc:623, ./pages/infrastructure-services/OpenSSH.adoc:751", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 174, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/15730477/?format=api", "priority": 100, "id": 17122874, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=f47c141f9684db87", "url": "https://translate.fedoraproject.org/api/units/17122874/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.601292Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "To avoid being presented with the warning about an unknown host, a user's system must trust the CA's public key that was used to sign the host certificates. In this example that is `ca_host_key.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": -7442281670338817679, "content_hash": -7442281670338817679, "location": "./pages/infrastructure-services/OpenSSH.adoc:626", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 175, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 34, "source_unit": "https://translate.fedoraproject.org/api/units/15730478/?format=api", "priority": 100, "id": 17122875, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=18b7b440710dd171", "url": "https://translate.fedoraproject.org/api/units/17122875/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.606199Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Trusting the Host Signing Key" ], "previous_source": "", "target": [ "" ], "id_hash": 8881275522096958850, "content_hash": 8881275522096958850, "location": "./pages/infrastructure-services/OpenSSH.adoc:628", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 176, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/15730479/?format=api", "priority": 100, "id": 17122876, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=fb40a10846f60d82", "url": "https://translate.fedoraproject.org/api/units/17122876/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.611859Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Extract the contents of the public key used to sign the host certificate. For example, on the CA:" ], "previous_source": "", "target": [ "" ], "id_hash": 1666541473212174740, "content_hash": 1666541473212174740, "location": "./pages/infrastructure-services/OpenSSH.adoc:630", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 177, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 18, "source_unit": "https://translate.fedoraproject.org/api/units/15730480/?format=api", "priority": 100, "id": 17122877, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=9720bea3e2449194", "url": "https://translate.fedoraproject.org/api/units/17122877/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.617092Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "cat ~/.ssh/ca_host_key.pub\nssh-rsa pass:quotes[_AAAAB5Wm._]== root@ca-server.example.com\n" ], "previous_source": "", "target": [ "" ], "id_hash": -9207290092019541174, "content_hash": -9207290092019541174, "location": "./pages/infrastructure-services/OpenSSH.adoc:635", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 178, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/15730481/?format=api", "priority": 100, "id": 17122878, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=0039227191339b4a", "url": "https://translate.fedoraproject.org/api/units/17122878/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.622318Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "To configure client systems to trust servers' signed host certificates, add the contents of the `ca_host_key.pub` into the global `known_hosts` file. This will automatically check a server's host advertised certificate against the CA public key for all users every time a new machine is connected to in the domain `*.example.com`. Login as `root` and configure the `/etc/ssh/ssh_known_hosts` file, as follows:" ], "previous_source": "", "target": [ "" ], "id_hash": 3244899416033123796, "content_hash": 3244899416033123796, "location": "./pages/infrastructure-services/OpenSSH.adoc:638", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 179, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 60, "source_unit": "https://translate.fedoraproject.org/api/units/15730482/?format=api", "priority": 100, "id": 17122879, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=ad0832d3a086ddd4", "url": "https://translate.fedoraproject.org/api/units/17122879/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.627568Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]# vi /etc/ssh/ssh_known_hosts\n# A CA key, accepted for any host in *.example.com\n@cert-authority *.example.com ssh-rsa pass:quotes[_AAAAB5Wm._]\n" ], "previous_source": "", "target": [ "" ], "id_hash": -3163044009712318393, "content_hash": -3163044009712318393, "location": "./pages/infrastructure-services/OpenSSH.adoc:644", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 180, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 17, "source_unit": "https://translate.fedoraproject.org/api/units/15730483/?format=api", "priority": 100, "id": 17122880, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=541a9c3b502b8847", "url": "https://translate.fedoraproject.org/api/units/17122880/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.633145Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Where `ssh-rsa _AAAAB5Wm._pass:attributes[{blank}]` is the contents of `ca_host_key.pub`. The above configures the system to trust the CA servers host public key. This enables global authentication of the certificates presented by hosts to remote users." ], "previous_source": "", "target": [ "" ], "id_hash": 6618392792553376760, "content_hash": 6618392792553376760, "location": "./pages/infrastructure-services/OpenSSH.adoc:647", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 181, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 34, "source_unit": "https://translate.fedoraproject.org/api/units/15730484/?format=api", "priority": 100, "id": 17122881, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=dbd9412dd8264bf8", "url": "https://translate.fedoraproject.org/api/units/17122881/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.638516Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Creating SSH Certificates" ], "previous_source": "", "target": [ "" ], "id_hash": -4513075604629555691, "content_hash": -4513075604629555691, "location": "./pages/infrastructure-services/OpenSSH.adoc:649", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 182, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/15730485/?format=api", "priority": 100, "id": 17122882, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=415e55a61d92f615", "url": "https://translate.fedoraproject.org/api/units/17122882/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.646314Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "A certificate is a signed public key. The user's and host's public keys must be copied to the CA server for signing by the CA server's private key." ], "previous_source": "", "target": [ "" ], "id_hash": 5761733313172073579, "content_hash": 5761733313172073579, "location": "./pages/infrastructure-services/OpenSSH.adoc:652", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 183, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 28, "source_unit": "https://translate.fedoraproject.org/api/units/15730486/?format=api", "priority": 100, "id": 17122883, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=cff5c9ebde27ec6b", "url": "https://translate.fedoraproject.org/api/units/17122883/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.651528Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Copying many keys to the CA to be signed can create confusion if they are not uniquely named. If the default name is always used then the latest key to be copied will overwrite the previously copied key, which may be an acceptable method for one administrator. In the example below the default name is used. In a production environment, consider using easily recognizable names. It is recommend to have a designated directory on the CA server owned by an administrative user for the keys to be copied into. Copying these keys to the `root` user's `/etc/ssh/` directory is not recommend. In the examples below an account named `admin` with a directory named `keys/` will be used." ], "previous_source": "", "target": [ "" ], "id_hash": 4925376788115266872, "content_hash": 4925376788115266872, "location": "./pages/infrastructure-services/OpenSSH.adoc:657", "context": "", "note": "type: delimited block =", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 184, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 117, "source_unit": "https://translate.fedoraproject.org/api/units/15730487/?format=api", "priority": 100, "id": 17122884, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=c45a7417d0909d38", "url": "https://translate.fedoraproject.org/api/units/17122884/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.656615Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Create an administrator account, in this example `admin`, and a directory to receive the user's keys. For example:" ], "previous_source": "", "target": [ "" ], "id_hash": 3122831281519296648, "content_hash": 3122831281519296648, "location": "./pages/infrastructure-services/OpenSSH.adoc:661", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 185, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 18, "source_unit": "https://translate.fedoraproject.org/api/units/15730488/?format=api", "priority": 100, "id": 17122885, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=ab5686814c6f8088", "url": "https://translate.fedoraproject.org/api/units/17122885/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.663120Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]$ [command]#mkdir keys#\n" ], "previous_source": "", "target": [ "" ], "id_hash": -7784680188272738234, "content_hash": -7784680188272738234, "location": "./pages/infrastructure-services/OpenSSH.adoc:665", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 186, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/15730489/?format=api", "priority": 100, "id": 17122886, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=13f7429d1ffb8046", "url": "https://translate.fedoraproject.org/api/units/17122886/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.669034Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Set the permissions to allow keys to be copied in:" ], "previous_source": "", "target": [ "" ], "id_hash": 8744194619115921281, "content_hash": 8744194619115921281, "location": "./pages/infrastructure-services/OpenSSH.adoc:668", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 187, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 10, "source_unit": "https://translate.fedoraproject.org/api/units/15730490/?format=api", "priority": 100, "id": 17122887, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=f9599ead67495f81", "url": "https://translate.fedoraproject.org/api/units/17122887/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.674331Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]$ chmod o+w keys\nls -la keys\ntotal 8\ndrwxrwxrwx. 2 admin admin 4096 May 22 16:17 .\ndrwx------. 3 admin admin 4096 May 22 16:17 ..\n" ], "previous_source": "", "target": [ "" ], "id_hash": 2412464309427999281, "content_hash": 2412464309427999281, "location": "./pages/infrastructure-services/OpenSSH.adoc:675", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 188, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 27, "source_unit": "https://translate.fedoraproject.org/api/units/15730491/?format=api", "priority": 100, "id": 17122888, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=a17acb81f4c39231", "url": "https://translate.fedoraproject.org/api/units/17122888/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.680443Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Creating SSH Certificates to Authenticate Hosts" ], "previous_source": "", "target": [ "" ], "id_hash": 8140874819759593545, "content_hash": 8140874819759593545, "location": "./pages/infrastructure-services/OpenSSH.adoc:678", "context": "", "note": "type: Title ====", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 189, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/15730492/?format=api", "priority": 100, "id": 17122889, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=f0fa328430b15849", "url": "https://translate.fedoraproject.org/api/units/17122889/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.686629Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "The command to sign a host certificate has the following format:" ], "previous_source": "", "target": [ "" ], "id_hash": 5993158508251814751, "content_hash": 5993158508251814751, "location": "./pages/infrastructure-services/OpenSSH.adoc:681", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 190, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 11, "source_unit": "https://translate.fedoraproject.org/api/units/15730493/?format=api", "priority": 100, "id": 17122890, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=d32bf9e8fef59b5f", "url": "https://translate.fedoraproject.org/api/units/17122890/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.692753Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "ssh-keygen -s ca_host_key -I pass:quotes[_host_name_] -h ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": 822101195683042849, "content_hash": 822101195683042849, "location": "./pages/infrastructure-services/OpenSSH.adoc:685", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 191, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/15730494/?format=api", "priority": 100, "id": 17122891, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=8b68b0ae8a1c9621", "url": "https://translate.fedoraproject.org/api/units/17122891/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.698442Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "The host certificate will named `ssh_host_rsa_key-cert.pub`." ], "previous_source": "", "target": [ "" ], "id_hash": 4122998010648860534, "content_hash": 4122998010648860534, "location": "./pages/infrastructure-services/OpenSSH.adoc:688", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 192, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/15730495/?format=api", "priority": 100, "id": 17122892, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=b937d4d89a5e1776", "url": "https://translate.fedoraproject.org/api/units/17122892/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.704198Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Generating a Host Certificate" ], "previous_source": "", "target": [ "" ], "id_hash": 3607541174486540202, "content_hash": 3607541174486540202, "location": "./pages/infrastructure-services/OpenSSH.adoc:690", "context": "", "note": "type: Block title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 193, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/15730496/?format=api", "priority": 100, "id": 17122893, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=b2108f95a9dd9faa", "url": "https://translate.fedoraproject.org/api/units/17122893/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.710256Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "To authenticate a host to a user, a public key must be generated on the host, passed to the CA server, signed by the CA, and then passed back to be stored on the host to present to a user attempting to log into the host." ], "previous_source": "", "target": [ "" ], "id_hash": -8222862438683991045, "content_hash": -8222862438683991045, "location": "./pages/infrastructure-services/OpenSSH.adoc:692", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 194, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/15730497/?format=api", "priority": 100, "id": 17122894, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=0de2862db956a3fb", "url": "https://translate.fedoraproject.org/api/units/17122894/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.716427Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Host keys are generated automatically on the system. To list them enter the following command:" ], "previous_source": "", "target": [ "" ], "id_hash": 2981851149071465219, "content_hash": 2981851149071465219, "location": "./pages/infrastructure-services/OpenSSH.adoc:694", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 195, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 15, "source_unit": "https://translate.fedoraproject.org/api/units/15730498/?format=api", "priority": 100, "id": 17122895, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=a961a9d2517ebb03", "url": "https://translate.fedoraproject.org/api/units/17122895/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.722302Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]# ls -l /etc/ssh/ssh_host*\n-rw-------. 1 root root 668 May 6 14:38 /etc/ssh/ssh_host_dsa_key\n-rw-r--r--. 1 root root 590 May 6 14:38 /etc/ssh/ssh_host_dsa_key.pub\n-rw-------. 1 root root 963 May 6 14:38 /etc/ssh/ssh_host_key\n-rw-r--r--. 1 root root 627 May 6 14:38 /etc/ssh/ssh_host_key.pub\n-rw-------. 1 root root 1679 May 6 14:38 /etc/ssh/ssh_host_rsa_key\n-rw-r--r--. 1 root root 382 May 6 14:38 /etc/ssh/ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": -204958763796473554, "content_hash": -204958763796473554, "location": "./pages/infrastructure-services/OpenSSH.adoc:703", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 196, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 58, "source_unit": "https://translate.fedoraproject.org/api/units/15730499/?format=api", "priority": 100, "id": 17122896, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=7d27d7171a4ed92e", "url": "https://translate.fedoraproject.org/api/units/17122896/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.728506Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Copy the chosen public key to the server designated as the CA. For example, from the host:" ], "previous_source": "", "target": [ "" ], "id_hash": 2869199336477116098, "content_hash": 2869199336477116098, "location": "./pages/infrastructure-services/OpenSSH.adoc:706", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 197, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 17, "source_unit": "https://translate.fedoraproject.org/api/units/15730500/?format=api", "priority": 100, "id": 17122897, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=a7d17198488146c2", "url": "https://translate.fedoraproject.org/api/units/17122897/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.734639Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]# scp /etc/ssh/ssh_host_rsa_key.pub admin@ca-server.example.com:~/keys/ssh_host_rsa_key.pub\nThe authenticity of host 'ca-server.example.com (10.34.74.58)' can't be established.\nECDSA key fingerprint is SHA256:ZYEUaevOAEASvYjm58PiPdMebxhhlaTZBjTMr/N2I3c.\nAre you sure you want to continue connecting (yes/no/[fingerprint])? yes\nWarning: Permanently added 'ca-server.example.com,10.34.74.58' (RSA) to the list of known hosts.\nadmin@ca-server.example.com's password:\nssh_host_rsa_key.pub 100% 382 0.4KB/s 00:00\n" ], "previous_source": "", "target": [ "" ], "id_hash": -5278432894664137114, "content_hash": -5278432894664137114, "location": "./pages/infrastructure-services/OpenSSH.adoc:715", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 198, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 46, "source_unit": "https://translate.fedoraproject.org/api/units/15730501/?format=api", "priority": 100, "id": 17122898, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=36bf3d3fa6cea666", "url": "https://translate.fedoraproject.org/api/units/17122898/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.740793Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "Alternately, from the CA:" ], "previous_source": "", "target": [ "" ], "id_hash": 6035717800660344033, "content_hash": 6035717800660344033, "location": "./pages/infrastructure-services/OpenSSH.adoc:718", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 199, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/15730502/?format=api", "priority": 100, "id": 17122899, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=d3c32d5c70dc9ce1", "url": "https://translate.fedoraproject.org/api/units/17122899/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.747927Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?format=api", "source": [ "~]$ scp root@host_name.example.com:/etc/ssh/ssh_host_rsa_key.pub ~/keys/ssh_host_rsa_key.pub\n" ], "previous_source": "", "target": [ "" ], "id_hash": -212577568524698132, "content_hash": -212577568524698132, "location": "./pages/infrastructure-services/OpenSSH.adoc:721", "context": "", "note": "type: delimited block -", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 200, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/15730503/?format=api", "priority": 100, "id": 17122900, "web_url": "https://translate.fedoraproject.org/translate/fedora-docs-l10n-fedora-system-administrat/f39pagesinfrastructure-servicesopenssh/si/?checksum=7d0cc5d3e4de7dec", "url": "https://translate.fedoraproject.org/api/units/17122900/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-18T09:29:02.753923Z" } ] }