-rawsettings DetachedCertificate -hostkey and Load Authorities from PuTTY
Connect using a certificate with:
is possible if the option Security > Load Authorities from PuTTY is enabled as
if you change
then you will not be able to connect. This is because
changed SSHManualHostKeys
as
and that's right, if it's not a certificate, but if it's a certificate, then you need to change:
to connect.
Where
winscp.exe sftp://_@127.0.0.1:2200/ /hostkey="ecdsa-sha2-nistp256-cert-v01@openssh.com 256 HGzeMguvVfTsMb+WfkqmjZNXaeVcBXCQqXyjKUBy9pA" /rawsettings DetachedCertificate="C:\Users\user_\.ssh\id_rsa-cert.pub"
SshHostCAsFromPuTTY=1 and the host certificate is specified in:
[HKEY_CURRENT_USER\SOFTWARE\SimonTatham\PuTTY\SshHostCAs\X] "PublicKey"="AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFDm48o80E2Ah5JFxqRzYzRN5hJx2y1+Pkukace/j1n0aw+6CemCSz2o4T+n7CG9yyneWggyz59eser70VOLI3A=" "Validity"="*"
SshHostCAsFromPuTTY=0
then you will not be able to connect. This is because
-hostkey="ecdsa-sha2-nistp256-cert-v01@openssh.com 256 HGzeMguvVfTsMb+WfkqmjZNXaeVcBXCQqXyjKUBy9pA"
as
plink -v _@127.0.0.1:2200 -hostkey AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFDm48o80E2Ah5JFxqRzYzRN5hJx2y1+Pkukace/j1n0aw+6CemCSz2o4T+n7CG9yyneWggyz59eser70VOLI3A= -cert C:\Users\user_\.ssh\id_rsa-cert.pub
[...\SshHostCAs\X] "PublicKey"="AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFDm48o80E2Ah5JFxqRzYzRN5hJx2y1+Pkukace/j1n0aw+6CemCSz2o4T+n7CG9yyneWggyz59eser70VOLI3A=" "Validity"="*"
Where
PublicKey and Validity from file ~/.ssh/X:
@cert-authority * ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFDm48o80E2Ah5JFxqRzYzRN5hJx2y1+Pkukace/j1n0aw+6CemCSz2o4T+n7CG9yyneWggyz59eser70VOLI3A=
