openssh bugs - Oct 2014 - [Bug 2284] New: ssh-copy-id option to replace one key with another key (or ssh-replace-id command)

https://bugzilla.mindrot.org/show_bug.cgi?id=2284

            Bug ID: 2284
           Summary: ssh-copy-id option to replace one key with another key
                    (or ssh-replace-id command)
           Product: Portable OpenSSH
           Version: 6.6p1
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh-copy-id
          Assignee: unassigned-bugs at mindrot.org
          Reporter: pabs3 at bonedaddy.net

It would be nice to have a way to login to a remote host and replace
one key with another key quickly and safely. The command should do
something like this. I think that sed -i or some combination of grep
commands would be the way to do it. It should probably work like this:

Login with the old key to add the new key
  If failure, print error
  If success, login with the new key and remove the old key.
    If failure, login with the old key and remove the new key.
    If success, print success.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2284

versalismeisteralis at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |versalismeisteralis at gmail.c
                   |                            |om

--- Comment #1 from versalismeisteralis at gmail.com ---
Please see
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1342412

There is a fix (a new version of ssh-copy-id) in Ubuntu for this.

https://bazaar.launchpad.net/~ubuntu-branches/ubuntu/saucy/openssh/saucy/view/head:/contrib/ssh-copy-id

Is it possible to fix this annoying (entering your password twice)
behavior?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2284

versalismeisteralis at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Version|6.6p1                       |6.7p1

--- Comment #2 from versalismeisteralis at gmail.com ---
Please see
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1342412

There is a fix (a new version of ssh-copy-id) in Ubuntu for this.

https://bazaar.launchpad.net/~ubuntu-branches/ubuntu/saucy/openssh/saucy/view/head:/contrib/ssh-copy-id

Is it possible to fix this annoying (entering your password twice)
behavior?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2284

--- Comment #3 from versalismeisteralis at gmail.com ---
Hi sry for spamming this bug.

I intended to post to
https://bugzilla.mindrot.org/show_bug.cgi?id=2195, but somehow Bugzilla
messed this up. Sorry again :(

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2284

Philip Hands <phil at hands.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|unassigned-bugs at mindrot.org |phil at hands.com
             Status|NEW                         |ASSIGNED
                 CC|                            |phil at hands.com

--- Comment #4 from Philip Hands <phil at hands.com> ---
(In reply to Paul Wise from comment #0)

I think we'd need a new option in ssh to ensure that IdentityFile
options in the ssh_config will not be honoured, otherwise there would
be no certainty that the second login was really going via the new key,
and we could end up locking people out.

This bug highlights the problem:

  https://bugzilla.mindrot.org/show_bug.cgi?id=2331

Cheers, Phil.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.