SSH certificates: the better SSH experience

https://jpmens.net/2026/04/03/ssh-certificates-the-better-ssh-experience/

#openssh

edit: I have clarified some of the examples and have incorporated most of your feedback for which many thanks!

Jan-Piet Mens :: SSH certificates: the better SSH experience

@jpmens at first glance this does look awesome, thank you. I didn't spot anything related to revoking access, is this supported?

@ralight I omitted key revocation from the blog post to not add even more bloat, but I assume I should do it ...

Yes, key revocation is possible, and sshd has a RevokedKeys file which can be added to by ssh-keygen

@ralight your wish was my ...

See Revocation please in the article.