Trust a host CA in known_hosts

text

@cert-authority *.example.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAI...

Explanation

Trust host certificates signed by a CA.

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Same sheet · prioritizing Server Keys and Certificates

Create a key pair for signing user certificates.

Open In sheetbashsame section

Create a short-lived user certificate from a CA.

Open In sheetbashsame section

Allow user certificates signed by a trusted CA.

Open In sheetsshdconfigsame section

Create an Ed25519 host key for sshd.

Open In sheetbashsame section

Validate sshd_config syntax before restart.

Open In sheetbash1 tag match

Require key-based authentication on the server.

Open In sheetsshdconfig1 tag match