Comment Comment by semi There's extra complexity with ssh, it has its own file of revoked keys in RevokedKeys and you'll have to update that everywhere.see https://man.openbsd.org/ssh-keygen.1#KEY_REVOCATION_LISTS for more infoAnd unlike some other sshd directives that have a 'Command' alternative to specify a command to run instead of reading a file, this one doesn't, so you can't just DIY distribution by having it curl a shared revocation list. parent semi 2 years ago
see https://man.openbsd.org/ssh-keygen.1#KEY_REVOCATION_LISTS for more info
And unlike some other sshd directives that have a 'Command' alternative to specify a command to run instead of reading a file, this one doesn't, so you can't just DIY distribution by having it curl a shared revocation list.