SSH Lifetime Limit: reference original SSH key and prevent addition of key previously used
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Problem
The SSH lifetime limit feature is great for keeping keys fresh. That said, for some compliance standards in highly regulated industries, the feature is lacking.
Users can delete the existing expired SSH key in the Gitlab UI, they can re-add the same key again in Gitlab.
Proposal
To ensure that the keys are truly removed, GitLab should check the existing SSH key and compare the one added to truly ensure old SSH keys are no longer used.
Edited by 🤖 GitLab Bot 🤖