Displaying 1 result from an estimated 1 matches for "keypk8".
Did you mean:
keypad
2017 Mar 25
7
[Bug 2699] New: PKCS#8 private keys with AES-128-CBC stopped working
...Assignee: unassigned-bugs at mindrot.org
Reporter: peter at lekensteyn.nl
In older OpenSSH versions, the key derivation method was quite weak,
but the encryption method could be changed (see
https://security.stackexchange.com/a/39293). Basically:
openssl pkcs8 -topk8 -in id_rsa -out keypk8.pem -v2 AES-128-CBC
With the latest OpenSSH version, the key no longer functions. "ssh
host" fails with "invalid format".
Expected result (7.4p1):
$ ssh-keygen -f keypk8.pem -y
Enter passphrase: 1234
ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAAAgQDQ33ndDr5N/AI8y2PzrqGbadLeS5fSf2GsVJx2B...