openssh bugs - Jan 2017 - [Bug 2670] New: Add ssh_config option that sets the lifetime of the key if added via AddKeysToAgent

https://bugzilla.mindrot.org/show_bug.cgi?id=2670

            Bug ID: 2670
           Summary: Add ssh_config option that sets the lifetime of the
                    key if added via AddKeysToAgent
           Product: Portable OpenSSH
           Version: 7.2p2
          Hardware: amd64
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: dereks at lifeofadishwasher.com

Currently you can't set a lifetime for a key added by AddKeysToAgent
other than the lifetime set when running ssh-agent with -t.

Add an ssh_config AddKeysToAgentLifetime option to allow the setting of
a lifetime if a key is added via AddKeysToAgent.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2670

djl at mksh.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djl at mksh.org

--- Comment #1 from djl at mksh.org ---
Created attachment 3165
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3165&action=edit
Adds "AddKeysToAgentTimeout" option for ssh_config

I've attached a patch which provides a "AddKeysToAgentTimeout"
option
for ssh_config. It's been running on my personal machine for a few
weeks without issue but I'd appreciate anyone with more experience
looking it over.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2670

william at ewpettersson.se changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |william at ewpettersson.se

--- Comment #2 from william at ewpettersson.se ---
Created attachment 3188
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3188&action=edit
Slightly revised patch which tweaks documentation

I've slightly reworded the documentation in the patch from
djl at mksh.org, just to specify that the timeout relates to the
AddKeysToAgent option. Most of the work is still theirs, including all
actual source code changes which I did not touch.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2670

Mathias Dannesbo <neic at neic.dk> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |neic at neic.dk

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2670

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3165|0                           |1
        is obsolete|                            |
   Attachment #3188|0                           |1
        is obsolete|                            |
             Status|NEW                         |ASSIGNED
           Assignee|unassigned-bugs at mindrot.org |djm at mindrot.org
                 CC|                            |djm at mindrot.org,
                   |                            |dtucker at dtucker.net
   Attachment #3439|                            |ok?(dtucker at dtucker.net)
              Flags|                            |

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
Created attachment 3439
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3439&action=edit
AddKeysToAgent with interval support

This adds support for specifying an interval to AddKeysToAgent,
including requesting both per-use confirmation and an interval via
AddKeysToAgent="confirm 5m"

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2670

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |tomo at cx4a.org

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
*** Bug 2191 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2670

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3439|ok?(dtucker at dtucker.net)    |ok+
              Flags|                            |

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2670

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED
             Blocks|                            |3162

--- Comment #5 from Damien Miller <djm at mindrot.org> ---
This has been committed and will be in OpenSSH 8.4.


Referenced Bugs:

https://bugzilla.mindrot.org/show_bug.cgi?id=3162
[Bug 3162] Tracking bug for 8.4 release
-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.