Skip to content

Commit cb6af6a

Browse files
committed
Add warning about private keys
1 parent 4ee6dd5 commit cb6af6a

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

README.md

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -106,7 +106,8 @@ As a result, autossh detects the connection problem and restarts SSH.
106106

107107
## Key generation
108108

109-
You need two pairs of SSH keys to establish a secure SSH connection.
109+
You need two SSH key pairs to establish a secure SSH connection
110+
without the risk of MITM (Man-In-The-Middle) attacks.
110111
We encode the private keys in base64 format to pass them as environment variables.
111112

112113
```shell
@@ -117,6 +118,10 @@ ssh-keygen -t ed25519 -N '' -C key2-$(date -I) -f key2
117118
cat key2 | base64 -w 0 > key2.base64
118119
```
119120

121+
> [!WARNING]
122+
> Make sure both private keys are kept secret.
123+
> Any file containing a private key should be protected with proper file permissions.
124+
120125
## Example usage
121126

122127
In this example, both client and server containers are run on the same host.

0 commit comments

Comments
 (0)