Project

General

Profile

Actions

Feature #7392

closed

Please allow syncing authorized_keys into config.xml

Added by ml 35 about 7 years ago. Updated about 7 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
03/15/2017
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

For me it is a bit inconvenient to copy and paste ssh keys into UI.

I am usually doing this using ssh-copy-id which spares me from manually editing authorized_keys.

However on pfsense this file is lost at reboot and regenerated from config.xml

It would be awesome to be able on reboot to read authorized_keys as if it was pasted from the UI and saved back encrypted into config.xml

Thank you.

Actions #1

Updated by Jim Pingle about 7 years ago

  • Status changed from New to Rejected

While I could maybe see a script made to import keys there is no way this would be automated in the way you describe. It would be too easy to unintentionally retain old/outdated keys if a different configuration file was restored onto a box that had keys from an older config.

Actions #2

Updated by ml 35 about 7 years ago

ok, can you instead at least add an option to not clear the authorized_keys at reboot? it is really difficult to have to paste the keys into the ui

Actions #3

Updated by Kill Bill about 7 years ago

What's exactly difficult about CTRL+C, CTRL+V?

Actions #4

Updated by ml 35 about 7 years ago

Kill Bill wrote:

What's exactly difficult about CTRL+C, CTRL+V?

it takes more time and it's not just a CTRL-C CTRL-V (you have to find the key, display it, CTRL-C, open web ui, login, navigate to the section where you paste, ctrl-v).

on the opposite installing via ssh-copy-id it's just typing 'ssh-copy-id root@pfsense' because as a sysadmin I always have a terminal open with a ssh agent having the keys loaded. pfsense is just a small piece of the infrastructure.

Actions

Also available in: Atom PDF