3DES deprecated – SSH private keys

1–2 minutes

ServiceNow has decided to step away from 3DES. It may affect amid others your SSH private keys leveraged by Discovery.

Quick tip on converting the legacy private key provided that its header looks like this:

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC, XYZ123...

Prerequisite for Windows machines:

  • Openssl

Run following command on your private key (PEM format):

ssh-keygen -p -M PEM -f <file_name>

you’ll have to provide also the passphrase, if there is one set.

Make sure to back up the key prior to messing around with it.