[CPANEL-21776] Mask passphrase when using cPanel to import SSH keys

Willfosho · Jul 14, 2018

Hi Guys,

I'd consider this a bug in the new Git feature in cPanel72, but i guess it depends on your perspective! I guess you could also call it a feature?

When importing keys for a repo, the passpharse field is a text field instead of a password field. This isn't overly annoying in itself, unless you're super paranoid people are looking over your shoulder. However Chrome, and most other browsers, will try to be helpful and pre-fill that passphrase in the future. It's a bit of a security concern for any shared machines.

Is there a reason it wasn't set as a password field, or has it just been overlooked? This isn't the case when importing root ssh keys, for example.

cPanelMichael · Jul 16, 2018

Hello @Willfosho,

I've opened internal case CPANEL-21776 to report that characters entered in the "Passphrase" field in "cPanel >> SSH Access >> Manage SSH Keys >> Import Key" are not masked, as this is contrary to the behavior observed "WHM >> Manage root's SSH Keys”. I'll monitor this case and update this thread with more information as it becomes available.

Thank you.

cPanelMichael · Jul 16, 2018

Hello @Willfosho,

Internal case CPANEL-21776 was accepted. "Passphrase" is tentatively set to become a password field in "cPanel >> SSH Access >> Manage SSH Keys >> Import Key" as of cPanel & WHM version 76.

Thank you.

Forums

The Community Forums

Interact with an entire community of cPanel & WHM users!

[CPANEL-21776] Mask passphrase when using cPanel to import SSH keys

Willfosho Registered

cPanelMichael Forums Analyst
Staff Member

cPanelMichael Forums Analyst
Staff Member

In Progress [CPANEL-22101] Account list in Transfer Tool empty when migrating from Plesk

In Progress [CPANEL-22226] cpsrvd websocket process (Terminal feature) hangs and uses 100% CPU

SOLVED [CPANEL-22217]Track Delivery and :blackhole: entry

In Progress [CPANEL-22211] REACHED_MAXEMAILS return not working with emailtrack_user_stats

SOLVED [CPANEL-22053] WHM >> Daily Process Log is excluding common processes

Share This Page

Useful Searches

The Community Forums

Interact with an entire community of cPanel & WHM users!

[CPANEL-21776] Mask passphrase when using cPanel to import SSH keys

Willfosho Registered

cPanelMichael Forums Analyst Staff Member

cPanelMichael Forums Analyst Staff Member

In Progress [CPANEL-22101] Account list in Transfer Tool empty when migrating from Plesk

In Progress [CPANEL-22226] cpsrvd websocket process (Terminal feature) hangs and uses 100% CPU

SOLVED [CPANEL-22217]Track Delivery and :blackhole: entry

In Progress [CPANEL-22211] REACHED_MAXEMAILS return not working with emailtrack_user_stats

SOLVED [CPANEL-22053] WHM >> Daily Process Log is excluding common processes

Share This Page

cPanelMichael Forums Analyst
Staff Member

cPanelMichael Forums Analyst
Staff Member