up vote 0 down vote favorite
share [g+] share [fb]

Rather than request a public key to put into the user's authorized_keys, I would rather generate a key I can send to the user and tell them to use with their client,

ssh -i keyfile.pem host.server.com

link|improve this question
70% accept rate
you typically would just generate the RSA/DSA keys for the use with ssh in this manner. If you are generating a x.509 certificate including the private key, x.509 would not have any significant advantage over the much simpler RSA/DSA authentication. – syneticon-dj May 16 '11 at 16:29
Can you guarantee that you can send the private key and it's pass phrase to the user in a safe manner? – Iain♦ May 16 '11 at 17:36
feedback

1 Answer

up vote 2 down vote

You're still looking at generating a keypair (with a tool like ssh-keygen) and sending the user the private key in order to connect to your server. Note that this creates a few security problems. Namely you need a secure way to get the private key to them, and they lose the ability to control their private key.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.