889774 - Change the SSH public key for [e-mail]

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: Account Requests, task)

Description

[Henri Sivonen (:hsivonen)]

Attachment: New SSH public key

In order to be able to safely dispose of the old disks, I have created a new SSH key pair. Please remove my old DSA public key and replace it with the attached new RSA public key (hg account [e-mail]).

I have signed the new key with the old key to demonstrate that the new key is legitimate. Assuming that you have the all public key in a file named id_dsa_hsivonen.pub, you may verify the signature with the following commands:
ssh-keygen -e -f id_dsa_hsivonen.pub -m PKCS8 > pub8
openssl pkeyutl -verify -pubin -inkey pub8 -in id_rsa_hsivonen.pub -sigfile id_rsa_hsivonen.pub.sig

Comment 1

[Henri Sivonen (:hsivonen)]

Attachment: Signature for the new public key made with the old private key

Comment 2

[Henri Sivonen (:hsivonen)]

(In reply to Henri Sivonen (:hsivonen) from comment #0)
> Assuming that you have the all public key in a file named
> id_dsa_hsivonen.pub

s/all/old/

Comment 3

[Ludovic Hirlimann [:Usul]]

New Key added - give it 60 minutes to propagate. Once you've tested the key I'll remove the old one.

Comment 4

[Henri Sivonen (:hsivonen)]

Thanks. The new key seems to work, so please proceed with removing the old one.

Comment 5

[Ludovic Hirlimann [:Usul]]

(In reply to Henri Sivonen (:hsivonen) from comment #4)
> Thanks. The new key seems to work, so please proceed with removing the old
> one.

done