Skip to content

Introduction

SSHVerify helps you collect SSH public keys from users and verify that a user can authenticate with a specific SSH key. You can manage sessions from the web app or automate them through the REST API.

A session creates a unique connection_identifier. The user connects to the SSHVerify SSH server with that identifier as the SSH username. SSHVerify then records the connection and either collects the public keys offered by the client or checks them against the keys you supplied.

SSH key verification checks whether a user can authenticate with one or more expected public keys. Create a verification session, provide the keys to match, and send the generated SSH command to the user. The session becomes verified when the user’s SSH client proves access to the required key or keys.

SSH key collection records the public keys offered by a user’s SSH client. Create a collection session, send the generated SSH command to the user, and inspect the collected keys, fingerprints, client version, and connection metadata after the user connects.