In Fedora 41, it seems the SSH daemon no longer automatically uses the new certificate after its host certificates have been renewed. To get it to pick up the new ones, we have to explicitly tell it to reload. To handle that automatically, I've added a new systemd path unit that monitors the certificate files. When it detects that one of them has changed, it will send the signal to the SSH daemon to tell it to reload. |
||
---|---|---|
.. | ||
reload-ssh-cert.path | ||
reload-ssh-cert.service | ||
ssh-host-cert-sign@.service | ||
ssh-host-certs-renew.target | ||
ssh-host-certs-renew.timer |