Cannot decode Private Key about sshwifty HOT 4 CLOSED

I see. I can connect to my servers with a empty passphrase keys. Thanks!

from sshwifty.

Hello,

I've just tested it a bit, and can confirm it works at my end.

Have the key been encrypted? We don't support encrypted keys as doing so would require user to handover more of their secrets to the software, which is of course bad for their own security.

Also, I've failed to found the source error message "cannot decode private key". The closest I did found was "ssh: cannot decode encrypted private keys" here.

If that was the actual message, then it confirms that the key is indeed encrypted, and you need to manually decrypt it in order for Sshwifty to recognize it.

However, if the message was "Cannot use encrypted Private Key file" and you are using a old version (Order than 0.0.8-alpha that is), then there is a bug in the software which will block valid non-RSA private keys from been submitted. If this is the case, please use a newer version, lot's of other bugs has also been fixed since then.

from sshwifty.

Oh, sorry, yes, the message is "ssh: cannot decode encrypted private keys".
I'd like you to use ParseRawPrivateKeyWithPassphrase() instead of ParseRawPrivateKey(), so Sshwifty will recognize encrypted private keys. How about?

from sshwifty.

Sorry, I don't think I can do that. Because this software has been designed to collect as few data as possible.

If the software wants to decrypt user's private key, it will then have to collect the key passphrase, which is bad when you consider that later both information will be sent to the back-end server through public network.

An important background is, many people use one single passphrase to encrypt all of their private keys, effectively turning the passphrase to a master key. Handling and protecting a master key is too great of a responsibility for us, and a web app such as Sshwifty just doesn't have the power needed to fulfill it.

So, for the best interest of the user and their security, I have to refuse that. Hope you understand :)

from sshwifty.