Replace pubkey with privkey in keys_ssh.tmpl

[rluetzner]

If a user wants to verify an SSH public key from their account they have
to sign the randomly generated token with their private key.

Prior to this change the example command prompted to sign the token with
their public key instead.

Signed-off-by: Robert Lützner robert.luetzner@pm.me

[rluetzner]

Call me stupid, but I just ran into this when I tried to verify my SSH key. Of course it has to be the public key, but I blindly followed the instructions.

Here's an image showing what I changed:

[6543]

it should work with pub too as it points to the priv ...
but directly pointing to priv do also work

[rluetzner]

it should work with pub too as it points to the priv

@6543 , you're right. I didn't check that yesterday, but tried it out just now.

I encountered an issue when verifying my SSH key yesterday. It basically told me that something seems to have expired. Maybe if I had just retried it immediately with the path to my public key it would have worked as well. I used my private key the second time around and it worked, so I assumed that the hint is wrong.

Thanks for clearing that up. 🙂

[wxiaoguang]

According to man:

     -Y sign

The key used for signing is specified using the -f option and may refer to 
either a private key, 
or a public key with the private half available via ssh-agent(1)

Keep the pubkey is more likely to be how the key is used by ssh. Then I think we can keep the old prompt.

[6543]

oh damed - just merged :X

[wxiaoguang]

nvm, either is fine. indeed the purpose is to check the key itself. private key works in all cases.