SSH : Augmenter la sécurité de vos clefs avec PKCS#8

$ mv ~/.ssh/id_rsa ~/.ssh/id_rsa.old
$ openssl pkcs8 -topk8 -v2 des3 -in ~/.ssh/id_rsa.old -out ~/.ssh/id_rsa
$ chmod 600 ~/.ssh/id_rsa
# Check that the converted key works; if yes, delete the old one:
$ rm ~/.ssh/id_rsa.old

#!/bin/bash
: << 'TITLE.sh'
 Version: 0.1
 Authors: nobody@vhalholl.info
 Description: hardening ssh private key w/ pkcs#8
              http://martin.kleppmann.com/2013/05/24/improving-security-of-ssh-private-keys.html
 Dependencies: openssl
TITLE.sh

DEP=$(which openssl);[ ! -z $DEP ]&& {
 for k in $(echo $(for i in $(ls *);do file $i; done |grep private |cut -d : -f1));do
 echo "backup $k"; mv $k .$k.old
 echo "convert $k"; openssl pkcs8 -topk8 -v2 des3 -in .$k.old -out $k; chmod 600 $k
 done;
 exit 0;
}
echo "Openssl not found" && exit 1