Reset SSH CAs and authorized keys on reload

slackhq · Mar 26, 2024 · 2854858 · 2854858
1 parent bb009ab
commit 2854858
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ssh.go b/ssh.go
@@ -110,6 +110,10 @@ func configSSH(l *logrus.Logger, ssh *sshd.SSHServer, c *config.C) (func(), erro
 		return nil, fmt.Errorf("error while adding sshd.host_key: %s", err)
 	}
 
+	// Clear existing trusted CAs and authorized keys
+	ssh.ClearTrustedCAs()
+	ssh.ClearAuthorizedKeys()
+
 	rawCAs := c.GetStringSlice("sshd.trusted_cas", []string{})
 	for _, caAuthorizedKey := range rawCAs {
 		err := ssh.AddTrustedCA(caAuthorizedKey)