OpenSSH key and passphrase implementation

From: chris (cpenland@charter.net)
Date: 06/03/02


From: cpenland@charter.net (chris)
Date: 3 Jun 2002 10:56:35 -0700

I have installed OpenSSH_3.1p1 on my site's Sun servers following the
documentation from www.sunfreeware and the "Configuring OpenSSH for
the Solaris Operating Environment" Sun BluePrint. I generated the
rsa1, rsa and dsa host keys along with the private/public keys for the
user with passphrase.

We are connecting to the servers via SecureCRT 3.4.4. I have
configured SecureCRT to connect using public key and this works,
entirely too well, it does not prompt for passphrase. It
automatically connects to the server. I know this is one of the main
advantages of using public key, but I am afraid that if my desktop is
hijacked or compromised that the servers are now completely
vulnerable. Is there something I am missing in the configuration that
would prompt for the passphrase? I have invested quite a bit of time
reading about the configurable options in /usr/local/etc/sshd_config
and /usr/local/etc/ssh_config, but haven't found the solution.

Thanks In Advance -

Chris



Relevant Pages

  • OpenSSH key and passphrase implementation
    ... I have installed OpenSSH_3.1p1 on my site's Sun servers following the ... documentation from www.sunfreeware and the "Configuring OpenSSH for ... We are connecting to the servers via SecureCRT 3.4.4. ... advantages of using public key, but I am afraid that if my desktop is ...
    (comp.security.ssh)
  • OpenSSH key and passphrase implementation
    ... I have installed OpenSSH_3.1p1 on my site's Sun servers following the ... documentation from www.sunfreeware and the "Configuring OpenSSH for ... We are connecting to the servers via SecureCRT 3.4.4. ... advantages of using public key, but I am afraid that if my desktop is ...
    (comp.security.ssh)
  • OpenSSH key and passphrase implementation
    ... I have installed OpenSSH_3.1p1 on my site's Sun servers following the ... documentation from www.sunfreeware and the "Configuring OpenSSH for ... We are connecting to the servers via SecureCRT 3.4.4. ... advantages of using public key, but I am afraid that if my desktop is ...
    (comp.security.ssh)
  • Re: Event Viewer Configuration Question??
    ... 2000/2003) where management wants to find how Event Viewer is ... Eases the ability to keep tabs on 30+ servers. ... But as for configuring the ... Instead of the website you're using, I suggest to use OEx (Outlook Express ...
    (microsoft.public.windows.server.active_directory)
  • Re: Using SSH2 private key to sign a file
    ... open up .TGZ packets, deposited in a given directory, and run say ... replication from a central central server, the public key is already ... deployed to the remote servers for SSH authentication. ... Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org ...
    (comp.security.ssh)