Key expiration

[Orlando De Oliveira R]

Hi,

As I can control that the key of the users expires?
Some file of UX 11.0 control this parameter of key expiration?

Thanks,

Orlando

[Thomas Bianco]

perhaps you could be a bit more specific?

i assume you're speaking of a asymetric cryptographic key pair. is this PGP/GPG, SSH?

in general, cryptographic keys expire because of an expiration date stored in the key pair itself. expired keys are still mathmatically valid, but most programs will not honor them. (think "Expired ID" not "Expired milk")

[Steven E. Protter]

If you exchanged public ssh keys, they do not to my knowledge and experience expire.

I've got keys at least a year old still working.

SEP

[Orlando De Oliveira R]

Hello,

To what I refer it is to the final user's of applications password. Is it possible that this password expires?.

I need that every so often it is requested the user the change of password in an automatic way.

Thank you,

Orlando

[John Poff]

Hi,

Take a look at the 'passwd' command. You can set the maxiumum number of days that a password can remain unchanged, the number of days prior to expiration that the user will be warned about the password, and the minimum number of days between password changes. You can set this from the command line or from SAM.

JP

[Andrew Cowan]

SEP's right, the only way that SSH/PKI keys expire is when they are wrapped in an X.509 certificate, and then its the certificate itself that provides the lifetime data.

If you want SSH keys that expire you could consider using Kerberos tickets as your keys. That way an expirey is automatically built in.

Good luck,
Andrew