Option to show MD5 fingerprint for SSH keys

andyshinn

Thank you for adding SSH key storing support. Very helpful instead of having to save as a note or a password field without line breaks.

One feature I would like is the ability to see the MD5 fingerprint at a glance. Systems I use SSH keys with (AWS and CircleCI) show the RSA key fingerprints as MD5 hashes instead of SHA256. This makes it difficult to correlate keys at a glance.

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided

floris_1P

Thanks for your feedback! MD5 support for fingerprints is on our list. For now, you can display them using ssh-add -l -E md5.

Endareth

Just wondering if there's any progress here. I've currently got about 50 SSH keys I'm trying to cross-check with AWS key pairs (which uses an MD5 signature), and I really don't want to have to export every single one from 1Password, check, and scrub, if I can avoid it!

Endareth

Just realised I can enable the 1P ssh-agent to help with this :-)
I don't have it as my default ssh-agent, as I use that for my YubiKey, but as it doesn't seem to interfere, I can still enable it and then just:
SSH_AUTH_SOCK=~/Library/Group\ Containers/2BUA8C4S2C.com.1password/t/agent.sock ssh-add -l -E md5

Endareth

Except apparently AWS don't use the standard method of generating the MD5 hash… (see https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/verify-keys.html)
I give up, no other option then exporting all the private keys and churning through them. Oh well :(

edit: And the 1 hour edit limit here is annoying ;-)

rblenkinsopp

I'd really like to see this as well, do we have any progress? It feels like a small lift to support it and would massively help with usability with certain services. As much as I'd love everyone else to support SHA256 fingerprints, many major services currently don't.