Is it possible to configure ssh using PubkeyAuthentication yes
but only allowing pub/private key pairs with a passphrases?
-
1See this similar/related question: serverfault.com/q/82649/253490– CastagliaMar 25, 2016 at 22:28
-
Thanks for the heads up, I didn't find that question earlier when I searched sf.– mahatmanichMar 25, 2016 at 23:02
Add a comment
|
1 Answer
No, the server has no knowledge of the protection used for the SSH key on the client.
It could be a passworded PEM file, a key loaded into an agent, stored on a smartcard, etc -- all the server knows is the client responded with the correctly signed response.