I have several users that use SmartCVS on OSX to interact with our CVS repository. We use the cvs
:ext: (SSH2) method to access the repository, which is stored on a remote linux system. We use ssh key authentication, and require that users encrypt their private keys with a passphrase.
The version of ssh-keygen that ships with OSX uses
AES-128-CBC to encrypt private keys, and apparently whatever ssh library SmartCVS uses doesn't support decrypting this cipher, as it throws an error. If I generate a key on Windows using PuTTYgen and move that key over to OSX, things work fine. PuTTYgen (and most versions of ssh-keygen on linux) use the
DES-EDE3-CBC cipher, which SmartCVS is able to decrypt without issue.
So, my question is: is there a way to tell ssh-keygen which cipher to use when encrypting the private key? The
ssh-keygen(1) man page on OSX doesn't say anything about being able to set the cipher type, but I'm hoping there may be some other way to convert to another cipher type after generation.