TechPrufer
Sign inGet started

Blogs›Cloudflare›SSH Key Management with DNSSEC

SSH Key Management with DNSSEC

SSH Key Management with DNSSEC

1
posts
2016

Cloudflare's platform has evolved to enable innovative security solutions by leveraging DNSSEC for SSH key management. This allows for secure, centralized storage and retrieval of public keys via DNS TXT records, simplifying key distribution and revocation for administrators. This capability enhances the security posture of SSH deployments by integrating with DNSSEC's cryptographic validation, ensuring the integrity and authenticity of public keys used for authentication.

2016

Flexible, secure SSH with DNSSEC

1/13/2016

This post introduces a novel method for managing SSH public keys by storing them in DNS TXT records and retrieving them using OpenSSH's AuthorizedKeysCommand feature, validated by DNSSEC. It details the requirements for OpenSSH version, DNSSEC setup, key length limitations, and the creation of a shell script to parse DNS query results. The post also outlines the necessary server-side configuration for `sshd_config` and the creation of a dedicated user for executing the key retrieval script, effectively turning Cloudflare's DNS infrastructure into a PKI for SSH.