SSH Agent Workflow
Focus: Agent-Nutzung, Lifetime und Schlüsselauflistung.
Purpose
This example is a controlled SSH workshop lab. It performs local OpenSSH checks only and does not connect to production systems.
Documentation
Files
Run
./run.sh
The script writes temporary private keys and evidence below work/. That directory is ignored by Git.
Review Questions
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
- How does this example demonstrate
Agent-Nutzung, Lifetime und Schlüsselauflistungwith safe SSH behavior?
- How does this example demonstrate
Practice Appendix: Example SSH Agent Workflow
This appendix is a working backlog for longer trainings, reviews and repetitions. Each task can be checked locally with OpenSSH client tools, test keys and sample configurations.
A001. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: verify fingerprint and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A002. OpenSSH
- Task: evaluate configuration and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A003. Trust
- Task: justify risk and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A004. Security
- Task: explain error path and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A005. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: classify log line and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A006. OpenSSH
- Task: document trust model and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A007. Trust
- Task: plan rotation and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A008. Security
- Task: restrict access and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A009. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: review forwarding and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A010. OpenSSH
- Task: describe recovery path and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A011. Trust
- Task: verify fingerprint and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A012. Security
- Task: evaluate configuration and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A013. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: justify risk and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A014. OpenSSH
- Task: explain error path and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A015. Trust
- Task: classify log line and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A016. Security
- Task: document trust model and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A017. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: plan rotation and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A018. OpenSSH
- Task: restrict access and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A019. Trust
- Task: review forwarding and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A020. Security
- Task: describe recovery path and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A021. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: verify fingerprint and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A022. OpenSSH
- Task: evaluate configuration and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A023. Trust
- Task: justify risk and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A024. Security
- Task: explain error path and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A025. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: classify log line and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A026. OpenSSH
- Task: document trust model and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A027. Trust
- Task: plan rotation and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A028. Security
- Task: restrict access and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A029. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: review forwarding and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A030. OpenSSH
- Task: describe recovery path and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A031. Trust
- Task: verify fingerprint and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A032. Security
- Task: evaluate configuration and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A033. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: justify risk and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A034. OpenSSH
- Task: explain error path and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A035. Trust
- Task: classify log line and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A036. Security
- Task: document trust model and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A037. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: plan rotation and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A038. OpenSSH
- Task: restrict access and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A039. Trust
- Task: review forwarding and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A040. Security
- Task: describe recovery path and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A041. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: verify fingerprint and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A042. OpenSSH
- Task: evaluate configuration and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A043. Trust
- Task: justify risk and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A044. Security
- Task: explain error path and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A045. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: classify log line and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A046. OpenSSH
- Task: document trust model and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A047. Trust
- Task: plan rotation and connect the observation explicitly to
Trust. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A048. Security
- Task: restrict access and connect the observation explicitly to
Security. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A049. Agent-Nutzung, Lifetime und Schlüsselauflistung
- Task: review forwarding and connect the observation explicitly to
Agent-Nutzung, Lifetime und Schlüsselauflistung. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
A050. OpenSSH
- Task: describe recovery path and connect the observation explicitly to
OpenSSH. - Evidence: Record command, expected output, actual output, fingerprint or configuration line.
- Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
- Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
- Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.