Upgrading to MacOS Sierra will break your SSH keys and lock you out

#1

Post by raisedadead » Fri, Oct 14, 2016, 4:07 AM UTC

Upgrading to MacOS Sierra will break your SSH keys and lock you out
medium.freecodecamp.com

Re: Upgrading to MacOS Sierra will break your SSH keys and lock you out

#2

Post by rurban » Fri, Oct 14, 2016, 5:31 AM UTC

Never heard of ssh-copy-id? Copy & paste public ssh keys is a kindergarden solution.

Re: Upgrading to MacOS Sierra will break your SSH keys and lock you out

#3

Post by gumby » Fri, Oct 14, 2016, 5:40 AM UTC

umm, no. I have 1024 bit keys and they have continued to work fine from my Mac to various servers that have the corresponding public key. (yes they should be updated, but I have larger keys for other servers).

I use the stock ssh in /usr/bin/ssh

Perhaps you had dsa keys? Those were deprecated and support for them was dropped.

Re: Upgrading to MacOS Sierra will break your SSH keys and lock you out

#4

Post by closeparen » Fri, Oct 14, 2016, 6:32 AM UTC

rurban wrote: post #2

Never heard of ssh-copy-id? Copy & paste public ssh keys is a kindergarden solution.

Needing to install something (ssh-copy-id does not ship with OSX) to copy a little bit of text around isn't great either.

Re: Upgrading to MacOS Sierra will break your SSH keys and lock you out

#5

Post by jsjohnst » Fri, Oct 14, 2016, 1:43 PM UTC

> You can leave this blank or add a password for a little extra security (and a lot more typing).

Please please stop saying things like this. If typing the password is inconvenient to you, store it in your keychain. OS X/macOS makes this trivially easy. Having a pass phrase on your private key is (almost) as important as using a key with sufficient entropy.