noports icon indicating copy to clipboard operation
noports copied to clipboard

sshnp using ssh keys with passphrase has a security issue

Open cconstab opened this issue 2 months ago • 2 comments

Is your feature request related to a problem? Please describe.

The current --identity-passphrase option leaves the key and the passphrase in the shell history which is not safe

Describe the solution you'd like

I an ideal world not having to enter the passphrase at all ?

Describe alternatives you've considered

A couple of options.. Drop to a prompt to enter the passphrase Use the safer mechanism on particular platforms to get entry Does sshnp need to know the passphrase any way ?

Additional context

example existing commandline ╰$ sshnp -f @ccons -t @ssh_11 -h @rv_am -d ord_001 -u opc -i ~/.ssh/GitHub_rsa --identity-passphrase MySecurePassPhrase!!

cconstab avatar Dec 07 '24 20:12 cconstab