An appliance uses a curious way of obtaining ssh-rsa host keys: There is a single configuration option "management certificate" that sets RSA private keys both for HTTPS and SSH management.

Concretely, the configured certificate+key is used as-is for HTTPS. For SSH the device extracts and reuses the raw RSA key from the certificate (modulus N, public exponent e, private exponent d)

My question is: Is this "only" bad practice or a potential vulnerability?

Follow-up: What arguments can be used when opening a case with the vendor?

  • 2
    This is definitely at least bad practice, and the conservative approach is to consider it a vulnerability until proven otherwise. Such determination would require considering the details in the SSH variants and the HTTPS ciphersuites permitted, in order to check if the SSH server can be abused into a way of authenticating as an HTTPS host, and vice-versa. The "one usage, one key" rule of best practices is intended to make such difficult determination unnecessary. – fgrieu Nov 26 at 18:20

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.