On Tue, 26 Jan 2021 12:24:35 +1030, Alex Musolino <a...@musolino.id.au> wrote: alex> You're missing the 'role=client' tuple.
You are exactly correct. Looks like rsa(8) has a bug in its example for generating and installing a fresh key for a remote Unix system, in that it says to use: auth/rsagen -t 'service=ssh' >key auth/rsa2ssh key | ssh unix 'cat >>.ssh/authorized_keys' cat key >/mnt/factotum/ctl ssh unix Inferring from the example generating a tinc host key, it appears that the first line should instead be: auth/rsagen -t 'service=ssh role=client' >key Thank you *very* much for catching that. Dworkin ------------------------------------------ 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/Td072863a97c9d3e9-Mf0b3a263a2410234686cf460 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription