starred/the-bastion

Fork 0

mirror of https://github.com/ovh/the-bastion.git synced 2026-05-09 08:25:27 +02:00

[GH-ISSUE #135] Change key of a group #29

New issue

Closed

opened 2026-05-07 00:17:46 +02:00 by BreizhHardware · 5 comments

BreizhHardware commented

2026-05-07 00:17:46 +02:00

Owner

Originally created by @dwydler on GitHub (Jan 30, 2021).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/135

Hi Guys,
we used different groups for our environment. Mostly it uses ED25519-256. For reasons of compatibility, I would like to switch individual groups from ED25519 to RSA. Delete and re-create the affected groups is no options. Because with that we must also add all servers again.

Can someone describe how i can replace an ED25519 with a RSA key?

/Daniel

Originally created by @dwydler on GitHub (Jan 30, 2021). Original GitHub issue: https://github.com/ovh/the-bastion/issues/135 Hi Guys, we used different groups for our environment. Mostly it uses ED25519-256. For reasons of compatibility, I would like to switch individual groups from ED25519 to RSA. Delete and re-create the affected groups is no options. Because with that we must also add all servers again. Can someone describe how i can replace an ED25519 with a RSA key? /Daniel

BreizhHardware

2026-05-07 00:17:46 +02:00

closed this issue
added the
feature
label

BreizhHardware commented

2026-05-07 00:17:48 +02:00

Author

Owner

@speed47 commented on GitHub (Feb 1, 2021):

Hello Daniel,

Everything is ready, in the code, to handle group key change, and also groups with multiple keys (you could want to have an Ed25519 for security and an RSA for compatibility, the bastion would try both). We're just missing the groupGenerateEgressKey and groupDelEgressKey commands.

If you're in a hurry, I can give you a command to type on the bastion (as root) to do it manually. If you're okay waiting for a few days, I can probably get those 2 commands implemented this week.

@speed47 commented on GitHub (Feb 1, 2021): Hello Daniel, Everything is ready, in the code, to handle group key change, and also groups with multiple keys (you could want to have an Ed25519 for security and an RSA for compatibility, the bastion would try both). We're just missing the `groupGenerateEgressKey` and `groupDelEgressKey` commands. If you're in a hurry, I can give you a command to type on the bastion (as root) to do it manually. If you're okay waiting for a few days, I can probably get those 2 commands implemented this week.

BreizhHardware commented

2026-05-07 00:17:48 +02:00

Author

Owner

@dwydler commented on GitHub (Feb 1, 2021):

Hello @speed47,
i call it telepathy. Both features are welcome. No, we are not in a hurry. We can wait a few more weeks.
If we can test something, let ne know.

@dwydler commented on GitHub (Feb 1, 2021): Hello @speed47, i call it telepathy. Both features are welcome. No, we are not in a hurry. We can wait a few more weeks. If we can test something, let ne know.

BreizhHardware commented

2026-05-07 00:17:49 +02:00

Author

Owner

@speed47 commented on GitHub (Feb 17, 2021):

You can upgrade to the latest master branch if you want to try the feature, as the PR has just been merged.

You'll find two new commands: groupGenerateEgressKey and groupDelEgressKey. If those work as you expect and you find no issues, I'll go on and tag a new release!

@speed47 commented on GitHub (Feb 17, 2021): You can upgrade to the latest master branch if you want to try the feature, as the PR has just been merged. You'll find two new commands: `groupGenerateEgressKey` and `groupDelEgressKey`. If those work as you expect and you find no issues, I'll go on and tag a new release!

BreizhHardware commented

2026-05-07 00:17:50 +02:00

Author

Owner

@speed47 commented on GitHub (Feb 23, 2021):

This has been added to v3.03.00, closing this ticket as a result. Please reopen if you have a chance to test, should anything not behave as expected.

@speed47 commented on GitHub (Feb 23, 2021): This has been added to `v3.03.00`, closing this ticket as a result. Please reopen if you have a chance to test, should anything not behave as expected.

BreizhHardware commented

2026-05-07 00:17:50 +02:00

Author

Owner

@dwydler commented on GitHub (Mar 6, 2021):

Hello @speed47.
sorry for my late answer. I installed the new version of it and it work's as it should.
Many thanks for the implementation!

@dwydler commented on GitHub (Mar 6, 2021): Hello @speed47. sorry for my late answer. I installed the new version of it and it work's as it should. Many thanks for the implementation!

BreizhHardware referenced this issue

2026-05-07 00:19:40 +02:00

[PR #29] [MERGED] chore: also trigger basic workflow on PR #179