Merge pull request #1359 from vyos/mergify/bp/sagitta/pr-1354

Fix mistake in RPKI documentation about the use of TLS (backport #1354)
This commit is contained in:
Christian Breunig 2024-04-07 16:22:26 +02:00 committed by GitHub
commit 58d8b562d2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -140,11 +140,13 @@ Configuration
SSH
===
Connections to the RPKI caching server can not only be established by HTTP/TLS
but you can also rely on a secure SSH session to the server. To enable SSH you
first need to create yoursels an SSH client keypair using ``generate ssh
client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup
the connection.
Connections to the RPKI caching server can not only be established by TCP using
the RTR protocol but you can also rely on a secure SSH session to the server.
This provides transport integrity and confidentiality and it is a good idea if
your validation software supports it. To enable SSH, first you need to create
an SSH client keypair using ``generate ssh client-key
/config/auth/id_rsa_rpki``. Once your key is created you can setup the
connection.
.. cfgcmd:: set protocols rpki cache <address> ssh username <user>