IdentityFingerprint feature request

[Iain Morgan]

On Tue, Jan 09, 2018 at 15:58:00 -0500, Gregory Seidman wrote:
> The IdentityFile config (or -i argument) lets you insist on (or prioritize,
> at least) a particular key file on disk. The key can be retrieved from
> ssh-agent without decrypting the file on disk, but it must be found at the
> specified path. I have a use case in which keys are added to ssh-agent on a
> forwarded connection, but are not present on disk locally. There is
> currently no way to refer to a key in ssh-agent that is not also sitting on
> local disk. I propose either a new config (which I'm calling
> IdentityFingerprint) or extending the existing IdentityFile to accept the
> fingerprint (e.g. output from ssh-add -l: SHA256:...) of a key and use that
> if it's found in ssh-agent.
> 
> Is this a reasonable feature? Am I missing a way in which this is already
> supported?
> 

Do I understand correctly that what you are trying to do is specify what
key to use on a remote system from an forwarded agent socket? If that is
what you are trying to do, you can do already.

You just have to point IdentityFile to a copy of the public key on the
remote system.

-- 
Iain Morgan