cloudtools / cloudtools/ssh-ca

get_cert doesn't work with SSH agents

Open
#20 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
261
Forks
22
PR merge metrics
No merged PRs in 30d

Description

In recent versions of gpg, it [can serve as an SSH agent](https://wiki.archlinux.org/index.php/GnuPG#SSH_agent). This allows you to easily store your SSH key on a hardware device, like a yubikey.

Unfortunately, in this setup, if you're using ssh-ca, `get_cert` will fail with:

```
$ get_cert ""
Unable to find private key matching certificate.
```

Because it tries to find the private key in ~/.ssh. Since the private key is stored on a hardware device, it doesn't find it.

A simple workaround is to just `curl "" ~/.ssh/id_rsa-cert.pub` instead of using `get_cert`, but it would be nice if `get_cert` just worked.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.