bugzilla-daemon at bugzilla.mindrot.org
2016-Jan-28 07:42 UTC
[Bug 2534] New: option to get host key list from HostKeyAgent
https://bugzilla.mindrot.org/show_bug.cgi?id=2534
Bug ID: 2534
Summary: option to get host key list from HostKeyAgent
Product: Portable OpenSSH
Version: 7.1p1
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5
Component: sshd
Assignee: unassigned-bugs at mindrot.org
Reporter: igor at mir2.org
Currently, when sshd runs with HostKeyAgent, it still requires to list
the server keys with HostKey options pointing to the public keys that
agent provides. It would be nice to have an option to load this list
from the agent when a client connects, not on startup.
This is very useful when sshd runs, for example, in a restricted
container that do not have access to a file system holding the private
keys. Thus to change the server keys I not only need to signal sshd to
reload its config, but also to ensure that the public keys are
transferred into the sshd container complicating the key management.
--
You are receiving this mail because:
You are watching the assignee of the bug.
Apparently Analagous Threads
- [Bug 2533] New: do not check if HostKeyAgent is available on ssdh startup
- sshd and consequences of HostKeyAgent
- [Bug 2556] New: on Linux non-root process can chroot
- [Bug 2382] New: option to disable pid file with sshd
- [Bug 2293] New: ssh should have an option to automatically trust a local sshd's host key for a given set of names
