...

There are two different certificates that are needpossible:

• client certificate
  • This certificate is stored on the client and is provided to the host during the ssh connection establishment.
  • It is used on the host side to authenticate the clients that try to login.
  • This certificate replaces public key or password based login.
• host certificate
  • This certificate is stored on the host and is provided to the client during the ssh connection establishment.
  • It is used on the client side to authenticate the host that the client tries to login.
  • This certificate replaces the authorized key file entry for a given host.

At the moment we only use the client certificate within NetDEF.

Configuration

There are separate pages the guide you through the installation process for the Certificate Authority, the client and the host:

...