sshconfig-lint

CertificateFile not found

errorChecked by the CLIMISSING_CERTIFICATE

An explicit SSH certificate path does not point to a readable regular file.

Why it matters

SSH cannot present a certificate that was moved, renamed, or deleted. Unlike IdentityFile, CertificateFile does not define none as a disabling sentinel.

How to fix it

Point CertificateFile at the existing public certificate, commonly a file ending in -cert.pub, or remove the directive when no certificate is needed. Do not replace the path with none.

Before and after

What is wrong

Host work  CertificateFile ~/.ssh/old-work-cert.pub

Corrected configuration

Host work  CertificateFile ~/.ssh/id_ed25519-cert.pub