Skip to main content

honey ssh-ca init

honey ssh-ca init​

Create (or load) the SSH CA and print its public key

Synopsis​

Creates the SSH CA keypair under the state dir if it does not exist, then prints the CA public key as an authorized_keys line on stdout. Add it to ssh_gateway.trusted_ca (or pass --trusted-ca <file>); honey ssh-server also auto-trusts this CA from the state dir.

honey ssh-ca init [flags]

Options​

  -h, --help   help for init

Options inherited from parent commands​

      --cache-dir string     Override cache directory (default: XDG_CACHE_HOME/honey)
      --cache-ttl duration   Cache time-to-live (host discovery) (default 10m0s)
      --config string        Path to honey YAML (optional; also HONEY_CONFIG or default paths)
      --debug-log string     Path to write debug logs (disables debug logging if empty)
      --dir string           Directory holding the SSH CA key (default: state dir)
      --no-cache             Bypass read/write cache (host discovery)
      --record-dir string    Session recording directory for search (TUI), web, and cue-exec; overrides defaults.record_dir; default &lt;directory of config.yaml&gt;/records
      --refresh              Ignore cached entries and refresh (host discovery)

SEE ALSO​

  • honey ssh-ca - Manage the SSH certificate authority used by the SSH gateway