ansible-collection-hardening
ansible-collection-hardening copied to clipboard
do not manage trusted user ca keys if none exist
We are using Okta Advanced Server Access (formerly ScaleFT) and we need to configure sshd with the trusted user ca from Okta.
When setting ssh_trusted_user_ca_keys_file
to the ca file managed by sftd
this role overwrites this file every time and sshd is being restarted.
This change disables management of the ca file if no ca keys are set in ssh_trusted_user_ca_keys
.