security.pam.ussh.caFile

By default pam-ussh reads the trusted user CA keys from /etc/ssh/trusted_user_ca.

This should be set the same as your TrustedUserCAKeys option for sshd.

Type
null or absolute path
Default
null
Declared
<nixpkgs/nixos/modules/security/pam.nix>