Re: How to re-lock ssh private key?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Wolfgang S. Rupprecht wrote:
>
> Gordon Messmer <yinyang@xxxxxxxxx> writes:
>> Wolfgang S. Rupprecht wrote:
>>> Another thing that appears not to work with the gnome version of
>>> the ssh-agent is "ssh-add -d" or "ssh-add -D".  Not good.
>>
>> I think you're confused by the fact that the identities are still
>> listed by "ssh-add -l".  They're certainly deactivated and require
>> a passphrase in order to be used again (tested in GNOME 2.24).
>
> No, I'm confused by the fact that I can still ssh to remote machines
> without entering my key-unlocking passphrase. ;-)
>
>    $ ssh-add -D
>    All identities removed.
>    $ ssh localhost
>    Last login: Thu Mar  5 07:03:01 2009 from localhost
>    $

Right, this is clearly a gnome-keyring bug.  There are a good number
of them it seems.

Not honoring -c or -t is: http://bugzilla.gnome.org/525574
Inability to disable it is: http://bugzilla.gnome.org/558181

The latter is fixed upstream, but only in the gnome-2.25 branch.  I
don't know if anyone intends to backport the fix to the current stable
branch so F-10 can be updated.  The changes don't apply cleanly, so
it'd take a little bit of work to sort out.

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The most important single central fact about a free market is that no
exchange takes place unless both parties benefit.
    -- Milton Friedman

Attachment: pgpyzjlz84poB.pgp
Description: PGP signature

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux