search

keybase / bot-sshca

A chat bot that can manage your team's SSH accounts
BSD 3-Clause "New" or "Revised" License
222 stars 30 forks source link

"Unprotected private key file" provides wrong path #77

Open RayOei opened 4 years ago

RayOei commented 4 years ago

In the bot log an error is logged when processing a message (from kssh).

Encountered error while processing message from xxxx (messageID:80): ssh-keygen error: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/mnt/keybase-ca-key' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/mnt/keybase-ca-key": bad permissions (exit status 255)

The directory /mnt doesn't contain the ca-key file, however. After some searching I found it in the ../bot-ssha/docker/example-keybaseca-volume directory. CA_KEY_LOCATION is not set.

On Ubuntu 16.04LTS Docker: 19.03.5 build 633a0ea838 VERSION= 1.1.0