Support OpenSSH format private keys
A
Arndt
Starting from openssh 7.8 the default format for private keys has changed from PEM to OpenSSH:
That means that private keys generated with the referenced command (
ssh-keygen -t rsa -b 4096
) are not accepted by Circle CI anymore. PEM format can still be generated using ssh-keygen -t rsa -b 4096 -m PEM
however this is not documented when following the instructions found in the Circle CI / github documentationCCI-I-583
N
Nick Santamaria
Any movement on this?
m
mike c
I came across this error as well. It would be nice to at least have the error documented in the instructions.
G
George Reyes
We understand that it is important to our customers to use the existing SSH keys on CircleCI, and we are aware that the new default format of OpenSSH keys won’t work on CircleCI. We are definitely interested in supporting any shape or length of the SSH keys on our platform. However, extending the list of SSH keys we would accept is behind other mission critical work on our list and is not being currently prioritized. As we see interest in the idea grow, we will revisit this in the future.
R
Rose Kaplan-Bomberg
Note: upgrading to Mojave will make the new OpenSSH format the default when running
ssh-keygen
... https://apple.stackexchange.com/questions/345945/mojave-generate-ssh-key-with-old-private-key-format