Error trying to get CVS write access via web-form

[Christopher Faylor]

On Fri, Apr 02, 2004 at 01:15:30PM -0500, Frank Ch. Eigler wrote:
>>[...]
>>Is there a way to get ssh to tell us if the key looks right?  That's
>>probably the best way to verify keys.  [...]
>
>Or an even tougher-love approach would be to force new account holders
>to log in using the putative key within some time limit after initial
>account activation, to prove they hold a matching private key.

Yeah, a secondary verification step might be nice.

"ssh-keygen -l" does seem to do the job.  The only challenge is the
necessity of creating a temp file.  I hate that.  I tried using the
standard work around of passing the key file in a pipe and using
/proc/self/fd/0 but ssh-keygen is way too clever to allow that.

Anyway, now it's back to real work for me.  I'll look at this more
tonight.

cgf