Merge pull request #213 from autocrypt/ci-authentication

tighten up authentication for travis push

.travis.yml

@@ -17,8 +17,12 @@ addons:
     - inkscape
 
 before_install:
-  - openssl aes-256-cbc -K $encrypted_ee89c1e228aa_key -iv $encrypted_ee89c1e228aa_iv -in autocrypt.id_rsa.enc -out $TRAVIS_BUILD_DIR/id_rsa -d
-  - chmod 600 $TRAVIS_BUILD_DIR/id_rsa
+  - mkdir -p -m 0700 ~/.ssh
+  - openssl aes-256-cbc -K $encrypted_ee89c1e228aa_key -iv $encrypted_ee89c1e228aa_iv -in autocrypt.id_rsa.enc -out ~/.ssh/id_rsa -d
+  - chmod 600 ~/.ssh/id_rsa
+  - cat autocrypt.org.hostkeys >> ~/.ssh/known_hosts
+  - printf "Host *\n" >> ~/.ssh/config
+  - printf " %sAuthentication no\n" ChallengeResponse Password KbdInteractive >> ~/.ssh/config
 install:
   - pip install sphinx
 

autocrypt.org.hostkeys

@@ -0,0 +1,3 @@
+autocrypt.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9IAHIdl/I5tsLnX9dtOxEx28SlJDcSPTVSkh+eEaoOxB+YoK25Zqo62vWdvsKT4ny6chPd41J78jhG27NA5V/abOvDBRArP5EiX3nTbKjqG7d3SRLJjZKo6PLFkFWUNzJ0qgY41OQ1BPfYhZx4+TFXHmKddwHkbvXloY+MZYjcFTXiZBRxxarXci0ihMyMR3KJ2I3Sl/R98UGu6mrm0WtodpU4yR6LRWJXzXyuHs43coRuNKsIHf+u1W7D6C6sAvmBXbi4hfwMnU5EAXOmSGoBou1q1t3ulwtYsCEB7Xgrx9gI4bmiyAW23CIyVzcJgW8TABTyaH2O3+4VKm/tbMP
+autocrypt.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHljUFsMOQ2fNKSgztqmoWCeDzAXyKoq+ALDczr8GWE0
+autocrypt.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHSMVMA3ypl/YUEdxNdYM/D4nP/DpBziRcmVpHHfbUWeeF/8niTFftGZAZPsngVKPzpRPPT27hw6c5fDNR37UxE=

scripts/deploy.sh

@@ -9,9 +9,7 @@
 #   $TRAVIS_BUILD_DIR/doc/_build ${DEPLOY_USER}@autocrypt.org:~/test
 
 rsync -avz $TRAVIS_BUILD_DIR/doc/_build/html/ \
-  ${DEPLOY_USER}@autocrypt.org:build/${TRAVIS_BRANCH/\//_} \
-  -e "ssh -o StrictHostKeyChecking=no -o PasswordAuthentication=no -i $TRAVIS_BUILD_DIR/id_rsa"
+  ${DEPLOY_USER}@autocrypt.org:build/${TRAVIS_BRANCH/\//_}
 
 rsync -avz $TRAVIS_BUILD_DIR/doc/_build/latex/autocrypt*.pdf \
-  ${DEPLOY_USER}@autocrypt.org:build/${TRAVIS_BRANCH/\//_} \
-  -e "ssh -o StrictHostKeyChecking=no -o PasswordAuthentication=no -i $TRAVIS_BUILD_DIR/id_rsa"
+  ${DEPLOY_USER}@autocrypt.org:build/${TRAVIS_BRANCH/\//_}