This completely removes client-side support for the SSH 1 protocol, which was already disabled in 12 but is still enabled in 11. For that reason, we will not be able to merge 7.6p1 or newer back to 11.
26 lines
581 B
Bash
26 lines
581 B
Bash
# $OpenBSD: keygen-change.sh,v 1.6 2017/04/30 23:34:55 djm Exp $
|
|
# Placed in the Public Domain.
|
|
|
|
tid="change passphrase for key"
|
|
|
|
S1="secret1"
|
|
S2="2secret"
|
|
|
|
KEYTYPES=`${SSH} -Q key-plain`
|
|
|
|
for t in $KEYTYPES; do
|
|
# generate user key for agent
|
|
trace "generating $t key"
|
|
rm -f $OBJ/$t-key
|
|
${SSHKEYGEN} -q -N ${S1} -t $t -f $OBJ/$t-key
|
|
if [ $? -eq 0 ]; then
|
|
${SSHKEYGEN} -p -P ${S1} -N ${S2} -f $OBJ/$t-key > /dev/null
|
|
if [ $? -ne 0 ]; then
|
|
fail "ssh-keygen -p failed for $t-key"
|
|
fi
|
|
else
|
|
fail "ssh-keygen for $t-key failed"
|
|
fi
|
|
rm -f $OBJ/$t-key $OBJ/$t-key.pub
|
|
done
|