Re: OpenSSH ssh-keygen and non-empty passphrase

From: Bill Marcum (bmarcum_at_iglou.com.urgent)
Date: 05/26/05 

Date: Thu, 26 May 2005 00:37:30 -0400

On Thu, 26 May 2005 11:27:34 +1200, Matthew Poole
  <spam@stops.here> wrote:
>
> [matthewp@alexander ~]ssh-keygen -t dsa
> Generating public/private dsa key pair.
> Enter file in which to save the key (/home/matthewp/.ssh/id_dsa):
> Enter passphrase (empty for no passphrase):
>
> That sure looks like it's taking a passphrase from stdin.
> Maybe something changed after 3.9, which is the last version I've used it
> with?

That is no test of whether stdin is being used. Try this:
echo "my phrase" | ssh-keygen -t dsa 

-- 
Depend on the rabbit's foot if you will, but remember, it didn't help
the rabbit.
		-- R.E. Shay

Relevant Pages

  • Re: ssh2: login without a password
    ... Generating public/private dsa key pair. ... Enter passphrase (empty for no passphrase): ...
    (comp.security.ssh)
  • Re: Entering the Passphrase through stdin
    ... Is there a capability or way where the passphrase can be read ... from stdin vs tty? ...
    (SSH)
  • Re: ssh-add <defunct>: wheres the reaper.
    ... > Tsk, tsk! ... You should have a passphrase on your key. ... When ssh-add's stdin is not a tty and $DISPLAY is set, ...
    (Debian-User)
  • Re: Pb w/ text i/p to ssh-keygen on openSUSE
    ... for saving the key - but hits a pb after the "Enter passphrase (empty ... possibly some others) from the keyboard for this phrase; ... But perhaps even knowing the number of characters compromises security too much. ...
    (uk.comp.os.linux)
  • public-key ssh out of VMS 7.3-1
    ... Now I'm trying to use public-key SSH out of VMS. ... But it demands a passphrase! ... it the empty one, it falls back on interactive authentication. ...
    (comp.os.vms)