Signing a document with my SSH key, not a PGP key?

I want to sign a document with ~/.ssh/id_dsa so that people
who have
my public SSH key (~/.ssh/id_dsa.pub) can confirm that it's
from me. I
don't want to encrypt the document, just sign it.

How can I do this? Is it a good idea? Does ssh-keysign
(which is
disabled by default) play into it?

I know how to sign things using a PGP key, but was wondering
if an SSH
key would work as well?

-- 
We're just a Bunch Of Regular Guys, a collective group
that's trying
to understand and assimilate technology. We feel that
resistance to
new ideas and technology is unwise and ultimately futile.
_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"

On Friday 29 December 2006 07:46, Kelly Jones wrote:
> I want to sign a document with ~/.ssh/id_dsa so that
people who have
> my public SSH key (~/.ssh/id_dsa.pub) can confirm that
it's from me. I
> don't want to encrypt the document, just sign it.
>
> How can I do this? Is it a good idea? Does ssh-keysign
(which is
> disabled by default) play into it?
>
> I know how to sign things using a PGP key, but was
wondering if an SSH
> key would work as well?

Which you can make a signature with pretty much any public
key, signing 
things with an SSH key is a very ODD thing to do and doesn't
have any 
support infrastructure.

If you really want to do it, see 
<http://search.cpan.org/~dbrobins/Ne
t-SSH-Perl/lib/Net/SSH/Perl/Key/DSA.pm> 
which basically just lets you wrap an SSH DSA key and sign
with it. It 
won't make pretty cleartext signatures or whatnot.

If you instead really want to have a unified SSH/OpenPGP
infrastructure, you 
could use <http:/
/www.red-bean.com/~nemo/openssh-gpg/> which lets you
login 
SSH with OpenPGP keys instead of standard SSH keys.

Or, just use the OpenPGP infrastructure for what it's meant
for (encryping, 
signing, web-of-trust), and use SSH keys for what they are
meant for 
(point-to-point network authentication) and if you want to
correlate them, 
you can sign your SSH key with your OpenPGP key.

-- 
Wesley J. Landaker <wjlicecavern.net>
<xmpp:wjlicecavern.net>
OpenPGP FP: 4135 2A3B 4726 ACC5 9094  0097 F0A9 8A4C 4CD6
E3D2