From ffe97d8d04aaa20b77641d231b88db060c39faba Mon Sep 17 00:00:00 2001
From: Michael Scherer <misc@redhat.com>
Date: Mon, 16 Oct 2017 22:09:24 +0200
Subject: Remove my old ssh key (ROCA attack)

---
 roles/admin_ssh_keys/tasks/main.yml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

(limited to 'roles/admin_ssh_keys/tasks')

diff --git a/roles/admin_ssh_keys/tasks/main.yml b/roles/admin_ssh_keys/tasks/main.yml
index ea54fbd..f5dd4db 100644
--- a/roles/admin_ssh_keys/tasks/main.yml
+++ b/roles/admin_ssh_keys/tasks/main.yml
@@ -1,8 +1,16 @@
 ---
-- name: install root ssh keys
-  authorized_key: user=root
-                  key="{{ item }}"
+- name: Install root ssh keys
+  authorized_key:
+    user: root
+    key: "{{ item }}"
   with_file:
   - misc.pub
   - quaid.pub
   - duck.pub
+
+- name: Remove old root keys
+  authorized_key:
+    user: root
+    key: "{{ item }}"
+  with_file:
+  - misc_old.pub
-- 
cgit