SSH key generated by ssh-keygen is not recognized by Paramiko: “not a valid RSA private key file”

For OpenSSH 7.8 up, you have to trick it. Run ssh-keygen -p [-f file] -m pem to purportedly change passphrase, but reuse the old one. Use -P oldpw -N newpw if you want to avoid the prompts, as in a script, but be careful of making your passphrase visible to other users. As a side … Read more

Why does git sign with GPG keys rather than using SSH keys?

Update Sept. 2022: 1Password supports generating and storing an SSH key for Git commit signature, recognized by GitHub. Update 2021: OpenSSH 8.2+ is available (packaged for instance in Git For Windows 2.33.1), and “it is now possible to sign arbitrary data with your SSH keys” (Andrew Ayer), including commits in Git. Andrew points to git/git … Read more

Calculate RSA key fingerprint

Run the following command to retrieve the SHA256 fingerprint of your SSH key (-l means “list” instead of create a new key, -f means “filename”): $ ssh-keygen -lf /path/to/ssh/key So for example, on my machine the command I ran was (using RSA public key): $ ssh-keygen -lf ~/.ssh/id_rsa.pub 2048 00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff /Users/username/.ssh/id_rsa.pub (RSA) To get the … Read more