Obtaining SSH Key format from OpenPGP public certificate without gpgkey2ssh

2016-01-07 Thread Andre Heinecke 
Hi,

In a previous thread it was noted that gpgkey2ssh is deprecated and will 
likely be removed. 

Niibe pointed out how to add a key to GnuPG sshcontrol and obtain the SSH key 
format from ssh-add -L
https://lists.gnupg.org/pipermail/gnupg-users/2015-December/054871.html
This works for myself.

But I'm missing a way for someone that has only my public key to add this key 
to an SSH authorized_keys file without input from me.

E.g. Another person has verified / signed my PGP key that has an Authentication 
Subkey. How can this Person get the SSH Key representation without having to 
ask me to provide it? (Assuming the person has my public key and without 
gpgkey2ssh)

I think this use case is one of the nice features you get by associating an 
OpenPGP key with SSH Authentication and I would miss it if gpgkey2ssh is 
removed.

Regards,
Andre

-- 
Andre Heinecke |  ++49-541-335083-262  | http://www.intevation.de/
Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Obtaining SSH Key format from OpenPGP public certificate without gpgkey2ssh

2016-01-07 Thread NIIBE Yutaka 
On 01/07/2016 06:38 PM, Andre Heinecke wrote:
> E.g. Another person has verified / signed my PGP key that has an 
> Authentication 
> Subkey. How can this Person get the SSH Key representation without having to 
> ask me to provide it? (Assuming the person has my public key and without 
> gpgkey2ssh)
> 
> I think this use case is one of the nice features you get by associating an 
> OpenPGP key with SSH Authentication and I would miss it if gpgkey2ssh is 
> removed.

Exactly, this is very useful.  In the past, I wrote an article:

   http://www.gniibe.org/memo/software/ssh/using-gpgkey-for-ssh.html

Alternatively, we have openpgp2ssh utility in monkeysphere.

   http://web.monkeysphere.info/

I think that it's worth to keep gpgkey2ssh in GnuPG and to enhance it
to support ECC.
-- 

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users