diff --git a/src/content/partials/cloudflare-one/ssh/modify-sshd.mdx b/src/content/partials/cloudflare-one/ssh/modify-sshd.mdx index bb1e3e7da8607e5..c13cff8f9457cbc 100644 --- a/src/content/partials/cloudflare-one/ssh/modify-sshd.mdx +++ b/src/content/partials/cloudflare-one/ssh/modify-sshd.mdx @@ -16,15 +16,19 @@ The following procedure makes two changes to the `sshd_config` file on the remot # PubkeyAuthentication yes ``` -3. Remove the `#` symbol to uncomment the line; keep the setting `yes` enabled. +3. Remove the `#` symbol to uncomment the line: -4. Next, add a new line below `PubkeyAuthentication` as follows: + ```txt + PubkeyAuthentication yes + ``` + +4. Add a new line below `PubkeyAuthentication`: ```txt TrustedUserCAKeys /etc/ssh/ca.pub ``` - Save the file and quit the editor. You might need to use the following command again to save and exit. +5. Save the file and quit the editor. You might need to use the following command again to save and exit. ```txt :w !sudo tee % diff --git a/src/content/partials/cloudflare-one/ssh/public-key.mdx b/src/content/partials/cloudflare-one/ssh/public-key.mdx index c8e0e92038180e6..6cdb18030f52db0 100644 --- a/src/content/partials/cloudflare-one/ssh/public-key.mdx +++ b/src/content/partials/cloudflare-one/ssh/public-key.mdx @@ -16,6 +16,10 @@ 3. In the `ca.pub` file, paste the public key without any modifications. + ```txt title="ca.pub" + ecdsa-sha2-nistp256 open-ssh-ca@cloudflareaccess.org + ``` + The `ca.pub` file can hold multiple keys, listed one per line. Empty lines and comments starting with `#` are also allowed. 4. Save the `ca.pub` file. In some systems, you may need to use the following command to force the file to save depending on your permissions: