sshconfig-lint

RevokedHostKeys file is unreadable

errorChecked by the CLIREVOKED_HOST_KEYS_UNREADABLE

An explicit RevokedHostKeys file is missing, unreadable, or not a regular file.

Why it matters

OpenSSH refuses host authentication for every matching host when this file cannot be read. A stale path can therefore block all affected connections.

How to fix it

Point RevokedHostKeys at an existing readable KRL or revoked-keys file. Use RevokedHostKeys none only when revocation checking is intentionally disabled. Run the CLI on the same account that will run SSH.

Before and after

What is wrong

Host *  RevokedHostKeys ~/.ssh/revoked-old.krl

Corrected configuration

Host *  RevokedHostKeys ~/.ssh/revoked.krl