chuckwagoncomputing / fxos-firemote

A SSH and Telnet Client for Firefox OS.
Mozilla Public License 2.0
16 stars 3 forks source link

support for keys #3

Closed nickdesaulniers closed 8 years ago

nickdesaulniers commented 9 years ago

I don't use passwords at all for my ssh hosts, I would consider it bad practice. We should add the ability to support reading a key from the sd card or indexeddb or generate one. Maybe porting ssh-keygen with emscripten would help.

chuckwagoncomputing commented 9 years ago

paramikojs has support for keys; I removed it so I wouldn't have to try to port everything at once. It should be fairly simple to add back in.

nickdesaulniers commented 9 years ago

Nice, can it generate keys?

chuckwagoncomputing commented 9 years ago

nope.

chuckwagoncomputing commented 9 years ago

Should we use passphrase-encrypted keys?

nickdesaulniers commented 9 years ago

It would be good to assume the keys may or may not have passphrases.

chuckwagoncomputing commented 9 years ago

But if we're creating our own keys?

nickdesaulniers commented 9 years ago

Oh, let's worry about supporting keys made elsewhere first, before trying to tackle key gen. I don't use passphrases but I'm not sure if that's considered bad practice.

chuckwagoncomputing commented 9 years ago

I have disobeyed you. Keygen is working. (no passphrase) Now for a way to export the public key. Any ideas? (I have a couple bad ones/ones that won't work.)

nickdesaulniers commented 9 years ago

I am not a sysadmin, but what I do is allow for password authentication while my server is disconnected from the WAN and is only available locally. I then SCP my keys up to the box. Then I disable password authentication and verify that publickey auth is working. Then I connect my box back to the WAN. Is there a better way? I hope so, but this is something that you set up once and forget. I've only had to do it maybe 4 times in 4 years.

chuckwagoncomputing commented 8 years ago

Support for keys added.