Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To use the certificate, the user should activate the ssh-agent running:

$ eval $(ssh-agent)

Notice: if the agent is already activated, this step is not necessary. If you observe anomalous behaviours, try if jumping this step solves the issue.


At this point, to obtain the certificate run:

...

UI Text Box

$ step ssh list --raw  '<user_email>' | step ssh inspect  

 
-:  
       Type: ecdsa-sha2-nistp256-cert-v01@openssh.com user certificate  
       Public key: ECDSA-CERT SHA256:TdhIpD5KFZD37roGYcDstS7180TruOnNgNJeS8eJJPk  
       Signing CA: ECDSA SHA256:e0ZF6AnnUzi0g7Db9nOaXxkEjRq9D6Ka4tV04XqiIgM  
       Key ID: "<user_email>"  
       Serial: 841532770994081620  
       Valid: from 2022-02-15T11:55:24 to 2022-02-15T19:55:24  
       Principals:   
                <username>  
       Critical Options: (none)  
       Extensions:   
                permit-X11-forwarding   
                permit-agent-forwarding   forwarding  
                permit-port-forwarding   
                permit-pty   
                permit-user-rcpty

An alternative mode of creation of the step certificate

...