SSH Key Management on KDE

[Sudhir Khanger]

Hello,

I am wondering how you guys manage multiple ssh keys on your system.

This is how I got to manage multiple keys on my system.

Generate keys
ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_1 -C "yours(a)yours.com"
ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_2 -C "yours(a)yours.com"
ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_3 -C "yours(a)yours.com"

ksshaskpass came already installed and SSH_ASKPASS set to /usr/bin/ksshaskpass.

Moving on these keys can be added to ssh-agent using following command.

ssh-add ~/.ssh/test_ssh_key_1

I ran these commands through KRunner so it triggers ksshaskpass and
not password prompt on the terminal. This way Kwallet will save the
password and I will not be asked to enter passphrase every time I am
accessing anything over ssh.

In order to automatically load these keys at system start I created
following script.

~/.kde/Autostart/ksshaskpass

#!/bin/sh
export SSH_ASKPASS=/usr/bin/ksshaskpass
ssh-add ~/.ssh/test_ssh_key_1 < /dev/null
ssh-add ~/.ssh/test_ssh_key_2 < /dev/null
ssh-add ~/.ssh/test_ssh_key_3 < /dev/null

chmod 755 ~/.kde/Autostart/ksshaskpass

The problem is if KWallet is not opened as soon as system is started
KDE will start the script triggering ksshaskpass to ask to enter
password for the first ssh key. This is a working setup but not
perfect.

I was wondering if there is a way to ssh-add the key to ssh-agent
on-demand or maybe trigger to open KWallet instead of ksshaskpass.

What is wrong with my setup? How do you manage your ssh keys?

-- 
Regards,
Sudhir Khanger.
sudhirkhanger.com
https://github.com/donniezazen

[Martin Airs]

On Tuesday 08 July 2014 14:07:35 Sudhir Khanger wrote:
>  Hello,
>  
>  I am wondering how you guys manage multiple ssh keys on your system.
>  
>  This is how I got to manage multiple keys on my system.
>  
>  Generate keys
>  ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_1 -C "yours(a)yours.com"
>  ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_2 -C "yours(a)yours.com"
>  ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_3 -C "yours(a)yours.com"
>  
>  ksshaskpass came already installed and SSH_ASKPASS set to
>  /usr/bin/ksshaskpass.
>  
>  Moving on these keys can be added to ssh-agent using following command.
>  
>  ssh-add ~/.ssh/test_ssh_key_1
>  
>  I ran these commands through KRunner so it triggers ksshaskpass and
>  not password prompt on the terminal. This way Kwallet will save the
>  password and I will not be asked to enter passphrase every time I am
>  accessing anything over ssh.
>  
>  In order to automatically load these keys at system start I created
>  following script.
>  
>  ~/.kde/Autostart/ksshaskpass
>  
>  #!/bin/sh
>  export SSH_ASKPASS=/usr/bin/ksshaskpass
>  ssh-add ~/.ssh/test_ssh_key_1 < /dev/null
>  ssh-add ~/.ssh/test_ssh_key_2 < /dev/null
>  ssh-add ~/.ssh/test_ssh_key_3 < /dev/null
>  
>  chmod 755 ~/.kde/Autostart/ksshaskpass
>  
>  The problem is if KWallet is not opened as soon as system is started
>  KDE will start the script triggering ksshaskpass to ask to enter
>  password for the first ssh key. This is a working setup but not
>  perfect.
>  
>  I was wondering if there is a way to ssh-add the key to ssh-agent
>  on-demand or maybe trigger to open KWallet instead of ksshaskpass.
>  
>  What is wrong with my setup? How do you manage your ssh keys? 
Thats exactly how I do it too, love to know of other ways

Martin

[Juan Orti Alcaine]

El 2014-07-09 14:49, Martin Airs escribió:
>  
>  Thats exactly how I do it too, love to know of other ways
>  
>  Martin 

I also do exactly the same thing :)
I'm waiting for the pam-kwallet to do its path to the stable repo, that 
way kwallet will unlock when you log in.

[Adam Miller]

On Wed, Jul 9, 2014 at 7:49 AM, Martin Airs <martin(a)airs.me.uk&gt; wrote:
>  On Tuesday 08 July 2014 14:07:35 Sudhir Khanger wrote:
> > Hello,
> >
> > I am wondering how you guys manage multiple ssh keys on your system.
> >
> > This is how I got to manage multiple keys on my system.
> >
> > Generate keys
> > ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_1 -C &quot;yours(a)yours.com&quot;
> > ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_2 -C &quot;yours(a)yours.com&quot;
> > ssh-keygen -t rsa -f ~/.ssh/test_ssh_key_3 -C &quot;yours(a)yours.com&quot;
> >
> > ksshaskpass came already installed and SSH_ASKPASS set to
> > /usr/bin/ksshaskpass.
> >
> > Moving on these keys can be added to ssh-agent using following command.
> >
> > ssh-add ~/.ssh/test_ssh_key_1
> >
> > I ran these commands through KRunner so it triggers ksshaskpass and
> > not password prompt on the terminal. This way Kwallet will save the
> > password and I will not be asked to enter passphrase every time I am
> > accessing anything over ssh.
> >
> > In order to automatically load these keys at system start I created
> > following script.
> >
> > ~/.kde/Autostart/ksshaskpass
> >
> > #!/bin/sh
> > export SSH_ASKPASS=/usr/bin/ksshaskpass
> > ssh-add ~/.ssh/test_ssh_key_1 < /dev/null
> > ssh-add ~/.ssh/test_ssh_key_2 < /dev/null
> > ssh-add ~/.ssh/test_ssh_key_3 < /dev/null
> >
> > chmod 755 ~/.kde/Autostart/ksshaskpass
> >
> > The problem is if KWallet is not opened as soon as system is started
> > KDE will start the script triggering ksshaskpass to ask to enter
> > password for the first ssh key. This is a working setup but not
> > perfect.
> >
> > I was wondering if there is a way to ssh-add the key to ssh-agent
> > on-demand or maybe trigger to open KWallet instead of ksshaskpass.
> >
> > What is wrong with my setup? How do you manage your ssh keys?
>
>  Thats exactly how I do it too, love to know of other ways
>  
Same here, I'm currently using the same approach but am interested in
other potentially "more clean" methods.

-AdamM

>  Martin
>  _______________________________________________
>  kde mailing list
>  kde(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/kde
>  New to KDE4? - get help from http://userbase.kde.org