2 .Dd $Mdocdate: June 11, 2008 $
7 .Nd translate OpenPGP keys to SSH keys
9 .Nm openpgp2ssh < mykey.gpg
11 .Nm gpg --export $KEYID | openpgp2ssh $KEYID
13 .Nm gpg --export-secret-key $KEYID | openpgp2ssh $KEYID
15 openpgp2ssh takes OpenPGP-formatted RSA and DSA keys on standard
16 input, and spits out the requested equivalent SSH-style key on
19 If the data on standard input contains only a single key, you can
20 invoke openpgp2ssh without arguments. If the data on standard input
21 contains multiple keys (e.g. a primary key and associated subkeys),
22 you must specify a specific OpenPGP keyid (e.g. CCD2ED94D21739E9) or
23 fingerprint as the first argument to indicate which key to export.
24 The keyid must be at least 8 hex characters.
26 If the input contains an OpenPGP RSA or DSA public key, it will be
27 converted to the OpenSSH-style single-line keystring, prefixed with
28 the key type. This format is suitable (with minor alterations) for
29 insertion into known_hosts files and authorized_keys files.
31 If the input contains an OpenPGP RSA or DSA secret key, it will be
32 converted to the equivalent PEM-encoded private key.
34 Note that the keys output from this process are stripped of all
35 identifying information, including certifications, self-signatures,
38 openpgp2ssh is part of the
40 framework for providing a PKI for SSH.
42 .Nm gpg --export-secret-key $KEYID | openpgp2ssh $KEYID | ssh-add -c /dev/stdin
44 This pushes the secret key into the active
48 which know how to talk to the
50 can now rely on the key.
52 openpgp2ssh and this man page were written by Daniel Kahn Gillmor
53 <dkg@fifthhorseman.net>.
55 openpgp2ssh currently only exports into formats used by the OpenSSH.
56 It should support other key output formats, such as those used by
59 Secret key output is currently not passphrase-protected.
61 This program is not yet implemented, and this man page currently only
62 describes expected functionality.
66 .Xr monkeysphere-server 8