I've just registered my website so people can accesses by HTTPS (and will be forced to, HSTS & redirects are part of configuration).
It's set up with GitLab. I can access my repositories via HTTPS just fine. I install a workstations's public certificate, generated with
ssh-keygen -t rsa -b 4096 -C "workstation name"
so I can push and pull files without a username/password combo.
Now I try to check out
git clone email@example.com:group/repository.git
And I get the old prompt
The authenticity of host 'git.myserver.com (#.#.#.#)' can't be established. RSA key fingerprint is SHA256:HAHANO17pLUsNE2KoVKweYDEwhJHu1l4ugaoT+fHdx0.
Are you sure you want to continue connecting (yes/no)?
...but wait. HTTPS needs no user confirmation, because the certificate isn't self-signed.
I keep reading "X.509" - and that Certification Authority looks to be the same thing as the CA that gave me my HTTPS cert. So, can I configure my server's SSH to use the same signed certificate (so I don't have to manually confirm and store the server's data in my workstations' known_hosts file)? And, how could I configure ssh/any generated files?