Re: Using SSH2 private key to sign a file
From: Mike (info_at_redterra.net)
Date: 05/14/03
- Next message: jef vratny: "Bad listen port"
- Previous message: Brian Pence: "Re: putty and telnet proxy"
- In reply to: Simon Tatham: "Re: Using SSH2 private key to sign a file"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 14 May 2003 23:20:46 +0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Yes, I see. Thanks for the suggestion.
"Think outide the box"
Mike
Simon Tatham wrote:
| Mike <info@redterra.net> wrote:
|
|>Given that there is already a 'master account' used to perform
|>replication from a central central server, the public key is already
|>deployed to the remote servers for SSH authentication. It would seem
|>quite elegant to use the same key pair for signing and verification of
|>these packets.
|
|
| Fair enough; so it's just a matter of saving the effort of
| distributing another public key to all the machines.
|
| In that case, I suspect you'd be better off just distributing
| another key, because that would cost less effort than writing custom
| software to sign a file with a host key :-)
|
| Alternatively ... you could use the host key to verify the integrity
| of the file in a different way. When the client machine receives a
| file, could it SSH to the server (thus using the host key to verify
| it's talking to the right machine) and get the server to return it
| the md5sum that the file _should_ have? Then you could check that
| against the md5sum of the file you've actually got, and you have
| your integrity check with no software development required.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE+wl7MxBMQ1XlKZNARAmXdAJ4gJNqfz10kklnai6RCUORTsXIsWACcD2bZ
AhMgp2S4yXSICArU5aB77fw=
=UhBf
-----END PGP SIGNATURE-----
- Next message: jef vratny: "Bad listen port"
- Previous message: Brian Pence: "Re: putty and telnet proxy"
- In reply to: Simon Tatham: "Re: Using SSH2 private key to sign a file"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
