D52: 160_473841.patch

Frankly, I don't understand for what this tool is actually useful. AFAICR, it
was used during development. I'll look into it.

gpgkey2ssh very poorly documented (no manpage, no help output), but it is
shipped with the source tarball, so i figure it should work properly at least
when the correct parameters are offered.

This tool (or something like it) would be very useful for projects attempting to
use the OpenPGP web of trust for ssh authentication. I'm involved with one such
project, which is in its infancy:

http://cmrg.fifthhorseman.net/wiki/OpenPGPandSSH

Hope that makes a little more sense about why i care. The debian bug contains a
couple simple command-line transcripts that should be helpful in reproducing the
error.

Thanks for looking into this, Werner!

Any word on this? The patch should be short enough for a quick review. It
problem can be demonstrated by setting GPGID to the key id of an RSA key, and doing:

gpgkey2ssh $GPGID > tmp.out
ssh-keygen -l -f

the first number in the ssh-keygen output should equal the bit length of the RSA
key (e.g. 1024). Numbers significantly smaller than that indicate that the
exponent is being used instead of the modulus.

You can do a comparable demonstration for DSA keys, except that ssh-keygen will
simply refuse to parse them because of the wrong label. Applying this patch
should fix both cases.

Whoops! Of course, the second line of the demonstration should actually read:

ssh-keygen -l -f tmp.out

sorry for the goof.

Applied. svn rev 4887.