Sign a user public key

bash

ssh-keygen -s ~/.ssh/ca_user -I alice@example.com -n alice -V +52w ~/.ssh/id_ed25519.pub

Explanation

Create a short-lived user certificate from a CA.

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Same sheet · prioritizing Server Keys and Certificates

Create a key pair for signing user certificates.

Open In sheetbashsame section

Allow user certificates signed by a trusted CA.

Open In sheetsshdconfigsame section

Trust host certificates signed by a CA.

Open In sheettextsame section

Create an Ed25519 host key for sshd.

Open In sheetbashsame section

Validate sshd_config syntax before restart.

Open In sheetbash1 tag match

Require key-based authentication on the server.

Open In sheetsshdconfig1 tag match