Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Stephane Ducasse
On Thu, Aug 31, 2017 at 11:23 AM, Esteban Lorenzano wrote: > you are all confused :) > > Sean talks about storing the passphrase for SSH, not the HTTPS user/pass. > Nevertheless both, passphrase and user/pass needs to be stored on Pharo and > then they are not safe. > > Now,

Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Sean P. DeNigris
Peter Uhnák wrote > Just about as safe as storing credentials for SmalltalkHub. (and to be > fair, STHub is even worse in that the connection is not encrypted. Imagine > someone observing traffic on PharoDays/ESUG conf.) - Cheers, Sean -- Sent from:

Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Norbert Hartl
> Am 31.08.2017 um 12:52 schrieb Peter Uhnák : > > So you do not put passphrases on your ssh keys? > > Not always. > > Because you don't give the private key away why protect it? So imagine you > have development process that includes a jenkins that needs to build the >

Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Tim Mackinnon
To further her add to what Peter is saying - in GitLab you can add secret variables (which are encrypted) and can be referenced only during the build process. So you can call your image with the value of one of these variables. Which is fine if you don't persist the value. I'm wondering if we

Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Esteban Lorenzano
you are all confused :) Sean talks about storing the passphrase for SSH, not the HTTPS user/pass. Nevertheless both, passphrase and user/pass needs to be stored on Pharo and then they are not safe. Now, how can we reliable store passwords in Pharo? This is a good thing we need to solve

Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Denis Kudriashov
But ssh agent not working for you? I work with Iceberg without extra configuration in image. No problems for me. But I am on Mac. So image now only keeps github password for pull requests. (Only problem with latest Mac update is that I am now manually add ssh keys after any reboot: ssh-add -A).

Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Norbert Hartl
> Am 31.08.2017 um 09:30 schrieb Peter Uhnák : > > > On Thu, Aug 31, 2017 at 8:45 AM, Norbert Hartl > wrote: > > > > Am 31.08.2017 um 03:32 schrieb Sean P. DeNigris >

Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Peter Uhnák
On Thu, Aug 31, 2017 at 8:45 AM, Norbert Hartl wrote: > > > > Am 31.08.2017 um 03:32 schrieb Sean P. DeNigris : > > > > https://github.com/pharo-vcs/iceberg/blob/master/README.md suggests to > > configure Iceberg with the "Use Custom SSH Keys" setting,

Re: [Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-31 Thread Norbert Hartl
> Am 31.08.2017 um 03:32 schrieb Sean P. DeNigris : > > https://github.com/pharo-vcs/iceberg/blob/master/README.md suggests to > configure Iceberg with the "Use Custom SSH Keys" setting, part of which > seems to include pasting one's SSH Key Passphrase into Pharo's

[Pharo-dev] Bloc: Safe to Store SSH Passphrase in Pharo?

2017-08-30 Thread Sean P. DeNigris
https://github.com/pharo-vcs/iceberg/blob/master/README.md suggests to configure Iceberg with the "Use Custom SSH Keys" setting, part of which seems to include pasting one's SSH Key Passphrase into Pharo's settings. Is that a good idea (i.e. is that safe)? - Cheers, Sean -- Sent from: