Skip to content

NOVALUE

← MongoDB Feedback Engine

My feedback

1 result found

  1. SSH private key - Ask for passphrase each time

    2 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    1 comment  ·  Compass » Connectivity  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    An error occurred while saving the comment
    NOVALUE commented  · 

    Yess! Never seen something like this before. Why would I want to store my passphrase on my filesystem? And next to the link to my ssh key?! Definitely an unnecessary security risk. At least the passwords are basically encrypted when stored. (connectionSecrets: 'encrypted-password' in source code)

    Excerpt from connection file:
    "sshTunnel": {
    "host": "domain.example",
    "port": 22,
    "username": "foo",
    "identityKeyFile": "/home/bar/.ssh/id_rsa"
    }

    When exporting connections, it stores the key in plaintext:
    "identityKeyPassphrase": "MyPersonalTestPassphrase"

    NOVALUE supported this idea  · 

Feedback and Knowledge Base

(thinking…)