Hi HN! Today I wanna show you a thing that solved my headache (and maybe will solve yours too). The only reason I created this tool is a mess around my SSH keys and configs. I am constantly working with a bunch of devices via SSH (such as Raspberry Pi's, VPS, handmade NAS, etc.) and I never knew whether permissions were right and there was no way to tell a strong key from a weak one. So, meet KeywardMain features:1. Lists every key with algorithm, size, fingerprint, comment, date of last modification and whether it has a passphrase2. Runs a security audit for all of your keys, config and permissions in ~/.ssh and grades the result with A-F score. Also here you can find fix suggestions for every problem3. Editor for ~/.ssh/config with byte-identical round-trip so all your comments are untouched4. Convenient key generator for those who have difficulties using the "ssh-keygen" command5. Backup of your keys, config and encrypted metadata so u can move all of your files quickly and safely and restore them on another machine6. Headless CLI, e.g. keyward audit --json --fail-on=warning7. Look through your known_hosts file to see address, key type and fingerprint and delete unnecessary…
Discussion (0)
No comments yet. Start the conversation!