lyft / python-blessclient

Python client for fetching BLESS certificates
Apache License 2.0
114 stars 39 forks source link

Use fingerprint during validation instead of identity file #51

Open dazzrpm opened 5 years ago

dazzrpm commented 5 years ago

Always throws "Could not add to ssh-agent" error every generation of certificate even though it is successful and it's also not removing the old one.

Identity_file location (~/.ssh/blessid) is being searched on the the result of ssh-add -i instead of its fingerprint. This changes will use ssh-keygen -lf to get the finger print value of the identity file and use it to check if it's already existing on the ssh agent.