Providing an SSH key

If you are a package maintainer, you will need to provide an SSH key.

Providing or updating your SSH key

Send your SSH public key to the cygwin-apps mailing list using this format:

    Name: Your Name
    ---- BEGIN SSH2 PUBLIC KEY ----
       RFC 4716 format ssh public key here
    ---- END SSH2 PUBLIC KEY ----

An ssh key-pair can be generated, and the public key exported as follows:

    ssh-keygen -f ~/.ssh/cygwin
    ssh-keygen -e -f ~/.ssh/cygwin.pub

The format of this email is not optional. It is read by a program, so please do not deviate from the above. In particular:

• Don't indent.
• Name: must use only ASCII characters.

Note: Also send email in this format if you need to update your SSH key. In that case, please use your name as recorded in http://cygwin.com/cygwin-pkg-maint.

Requests are handled manually and are acknowledged publicly in response to email to the cygwin-apps mailing list.

Connecting to cygwin.com

When connecting, make sure that you use the user cygwin with no password, and that you are using the SSH private key corresponding to the SSH public key you provided.

Once the SSH public key has been installed on cygwin.com, you'll have limited access:

• SFTP to upload packages.
• git to push to packaging repositories.
• ssh cygwin@cygwin.com alive to test connecting.
• A few other commands are also available e.g. untest to remove test labels, vault to vault packages, jobs to interact with build service jobs. Use ssh cygwin@cygwin.com help for a list.

You may wish to:

• Add a section to ~/.ssh/config selecting that SSH private key when connecting to cygwin.com, e.g.:

  Host cygwin.com
    User cygwin
    IdentityFile ~/.ssh/cygwin

  and/or,
• Set the value of SSH_KEY in ~/.cygport.conf to the SSH private key file. e.g. SSH_KEY=~/.ssh/cygwin.

The first time you connect, you should verify that the host key fingerprint matches one of the following hashes:

• RSA
  • SHA256 (OpenSSH 6.8 or later): SHA256:MFNiczzfX8/nvLSRZwR3CxMyycKtMan64Zm4C373FeM
  • MD5 (OpenSSH pre-6.8): 1d:1e:46:7f:4d:73:8d:10:20:c3:4c:5a:34:14:44:23
• ECDSA
  • SHA256 (OpenSSH 6.8 or later): SHA256:4bqfulMjMg7/L/38MJBw7mVMMu6EH+3MgMitrCRdFho
  • MD5 (OpenSSH pre-6.8): MD5:b4:58:a4:51:c0:21:e8:10:61:da:3a:49:0b:c5:d6:63
• ED25519
  • SHA256:5DrqonN/NcBalJRSSpE86TZRuNiBYukggX/j02fe1qA
  • MD5:46:59:b6:91:19:6d:4f:9d:8f:79:c3:ff:6c:e3:85:f0