Re: Key Import-- file does not begin with ssh.com key header?

[Dean Beeler]

If you can, use puttygen and export the key as an openssh format key.

Ideally one should generate keys on the device directly.

Dean

On Tuesday, August 7, 2012 7:04:45 AM UTC-7, Charlie Heitzig wrote:

I have a Private Key that I cannot get imported into iSSH.

My original file was of the form below, and then I added the -----BEGIN DSA PRIVATE KEY----- headers, both without success. Any recommendations? It seems that the headers are not right, but perhaps the key is just fine since it works with PuTTY and my router just fine.

-----BEGIN DSA PRIVATE KEY-----

PuTTY-User-Key-File-2: ssh-dss

Encryption: aes256-cbc

Comment: myKeyName-dsa-key-20120224

Public-Lines: 17

<key data here>

Private-Lines: 1

<key data here>

Private-MAC: <some longish number>

-----END DSA PRIVATE KEY-----

[Dean Beeler]

It's much more secure for each device to have its own private key. This way if your iDevice gets stolen, compromised, etc., you can go to the server that you presumably do still control and delete the public key for that device. In doing so, you automatically prohibit any future access from that iDevice (at least via that key.) Generating a private key per device applies to desktops, servers and anything that needs controlled access to a secure resource.

Dean

On Tuesday, August 14, 2012 4:28:38 AM UTC-7, Charlie Heitzig wrote:

Thanks. This worked of course.

Why do you recommend generating keys on the device? The algorithms are consistent by definition, right?

[Charlie Heitzig]

Ah. Good point! Thanks.

--> C

--
You received this message because you are subscribed to the Google Groups "iSSH/iX11" group.
To view this discussion on the web visit https://groups.google.com/d/msg/issh/-/qj6lgVUB4ssJ.
To post to this group, send email to is...@googlegroups.com.
To unsubscribe from this group, send email to issh+uns...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/issh?hl=en.