[Bug 2196] ssh-copy-id: selects "wrong" pubkey

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Nov 26 03:13:27 AEDT 2015


https://bugzilla.mindrot.org/show_bug.cgi?id=2196

--- Comment #3 from Felix Kaiser <felix.kaiser at fxkr.net> ---
Is there any reason not to have your main key in id_rsa (other than
aesthetics)?

I can actually think of one: in conjunction with IdentitiesOnly in
.ssh/config, to make SSH not try *any* key by default (lest the wrong
key end up in the wrong SSH servers logs). But these users wouldn't
want ssh-copy-id to pick a key by default either, so that's ok.

Anyway, in my opinion ssh-copy-id is just a (very useful) auxiliary
tool and so should follow OpenSSHs conventions, rather than invent its
own. I suspect that the vast majority of users expect it to do, instead
of the newest key.

So here's my suggestions:

1. Move the file

   (And if you *really* want SSH to use a different key by default,
    explicitly configure that in .ssh/config with "Host *".
    You can still override it on a per-host basis.)

2. If you can't, use a symlink

3. If you can't, use a shell alias

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list