lamdaemon SSH key
Brought to you by:
gruberroland
Just upgraded to 6.8 on Fedora 29, and decided to start trying to use lamdaemon.
Generating a public/private SSH key pair especially for the lamdaemon; it works for
plain old ssh connections, but fails the lamdaemon ssh test.
Turns out, after investigation, that
1) it has to be an RSA key pair (not DSA, ECDSA, etc)
2) using ssh-keygen on Fedora 29 has an 'updated' key delimiter that the code that LAM uses doesn't like:
old style (RHEL, etc, works with LAM):
-----BEGIN RSA PRIVATE KEY-----
new style (Fedora 29, ssh-keygen fropenssh-7.9p1-6.fc29) -----BEGIN OPENSSH PRIVATE KEY-----
I suspect this is a 'library' issue, where the crypto library is looking for the 'RSA' string, and rejecting everything else (like 'EC' and 'OPENSSH').
We use phpseclib (http://phpseclib.sourceforge.net/) for the SSH connection. Seems that it only supports RSA keys. We will update the documentation.
Updated docs