[X2Go-User] ssh-keygen.exe loads the processor every time the client starts

[Robert Dinse]

      I agree with this.  One of the things Snoden revealed was that the NSA
hung on to a large number of compromised keys to tain access to encrypted data.
In light of that re-using the same key is just making things too easy.

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
  Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
    Knowledgeable human assistance, not telephone trees or script readers.
  See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

On Fri, 6 Oct 2017, Mihai Moldovan wrote:

> Date: Fri, 6 Oct 2017 03:12:57 +0200
> From: Mihai Moldovan <ionic at ionic.de>
> To: Max A. <lithium at mail.ru>, x2go-user at lists.x2go.org
> Subject: Re: [X2Go-User] ssh-keygen.exe loads the processor every time the
>     client starts
> 
> On 09/28/2017 01:49 PM, Max A. wrote:
>> I'm using a x2go server on CentOS 6.9 (the latest version from EPEL,
>> 4.0.1.20), clients use Windows XP/7 and the latest version of X2Go
>> Client (4.1.0.0-2017.03.11). Each time the client connects,
>> ssh-keygen.exe (C:\Program Files\x2goclient\ssh-keygen.exe) starts with
>> the parameters "-t rsa -b 4096 -N" "-C" X2Go Client RSA user key "-f C:
>> /Users/max/.x2go/ssh/gen/key.fl1416 ". On not very powerful computers,
>> this causes a delay of a few seconds with each connection and irritates
>> users. Tell me please, if it is possible to generate this key once and
>> for all?
>
> I understand that this may be inconvenient, but no, there's currently no way to
> generate a set of keys that will be re-used.
>
> I explicitly decided against that. For more information and the rationale for
> this change, refer to the release announcement:
> http://lists.x2go.org/pipermail/x2go-announcements/2017/000302.html
>
>
>
> Mihai
>
>