Re: GnuPG OpenSSH

2007-08-22 Thread Srihari Vijayaraghavan
--- Werner Koch [EMAIL PROTECTED] wrote: On Mon, 20 Aug 2007 14:10, [EMAIL PROTECTED] said: 1. Is it possible to have only one key pair (public secret pref. DSA) that can be used for both GPG OpenSSH? (as a sys admin of some interest in cryptography, this is an important question)

Re: GnuPG OpenSSH

2007-08-22 Thread Alex Mauer
Srihari Vijayaraghavan wrote: I now have an 'authentication' subkey created. I've even extracted the SSH compatible public key from the subkey using gpgkey2ssh (which I can propagate to .ssh/authorized_keys of the remote machines). I'm stuck on unable to understand how to integrate the

Re: GnuPG OpenSSH

2007-08-21 Thread Srihari Vijayaraghavan
--- Moritz Schulte [EMAIL PROTECTED] wrote: 1. Is it possible to have only one key pair (public secret pref. DSA) that can be used for both GPG OpenSSH? (as a sys admin of some interest in cryptography, this is an important question) Uhm, possible... sure, why not. I just don't

Re: GnuPG OpenSSH

2007-08-21 Thread Srihari Vijayaraghavan
--- Werner Koch [EMAIL PROTECTED] wrote: On Mon, 20 Aug 2007 14:10, [EMAIL PROTECTED] said: 1. Is it possible to have only one key pair (public secret pref. DSA) that can be used for both GPG OpenSSH? (as a sys admin of some interest in cryptography, this is an important question)

Re: GnuPG OpenSSH

2007-08-21 Thread Alex Mauer
Werner Koch wrote: On Mon, 20 Aug 2007 14:10, [EMAIL PROTECTED] said: Yes. However you want separate keys for separate tasks. Fortunately OpenPGP provides just that: There is a primary key for certifying other keys (and subkeys) and subkeys for encryption, signing and authentication. The

Re: GnuPG OpenSSH

2007-08-21 Thread John Clizbe
Alex Mauer wrote: Werner Koch wrote: On Mon, 20 Aug 2007 14:10, [EMAIL PROTECTED] said: Yes. However you want separate keys for separate tasks. Fortunately OpenPGP provides just that: There is a primary key for certifying other keys (and subkeys) and subkeys for encryption, signing and

GnuPG OpenSSH

2007-08-20 Thread Srihari Vijayaraghavan
I've lightly read through a few gnupg man info pages, though my questions might sound like FAQ or outright annoying :-). I'm a happy user with OpenSSH GPG independently, but of late am trying to find if it's possible to unify them with just a key pair. 1. Is it possible to have only one key

Re: GnuPG OpenSSH

2007-08-20 Thread Werner Koch
On Mon, 20 Aug 2007 14:10, [EMAIL PROTECTED] said: 1. Is it possible to have only one key pair (public secret pref. DSA) that can be used for both GPG OpenSSH? (as a sys admin of some interest in cryptography, this is an important question) Yes. However you want separate keys for separate

Re: GnuPG OpenSSH

2007-08-20 Thread Moritz Schulte
1. Is it possible to have only one key pair (public secret pref. DSA) that can be used for both GPG OpenSSH? (as a sys admin of some interest in cryptography, this is an important question) Uhm, possible... sure, why not. I just don't know right now how one would achive that. 2. Is

Re: GnuPG OpenSSH

2007-08-20 Thread James Davis
Werner Koch wrote: Me too ;-). There are some text fragments floating around but there is no real HOWTO. Steps 1-4 on this page still apply if you're not using a smart card. You'll want to use ssh-add to add keys rather than expect it to pick them up automatically though.