210日に1回するもの

rotate-ssh-key.sh

#!/usr/bin/env bash

set -eux

DATE=$(date +%Y-%m-%d)
TMPDIR=/tmp/newkey-${DATE}
SSHDIR=${HOME}/.ssh
OLDDIR=${SSHDIR}/old_keys/${DATE}
NEWDIR=${SSHDIR}/new_key
KEYNAME=id_rsa

mkdir -p ${TMPDIR}
ssh-keygen -t rsa -b 4096 -C $(whoami)@yahoo-corp.jp -f ${TMPDIR}/${KEYNAME}

mkdir -p ${OLDDIR}
cp ${SSHDIR}/${KEYNAME}* ${OLDDIR} || true

mv ${NEWDIR}/${KEYNAME}* ${SSHDIR} || true

rm -rf ${NEWDIR}
mv ${TMPDIR} ${NEWDIR}

[[ -f ${SSHDIR}/${KEYNAME} ]] || cp ${NEWDIR}/${KEYNAME}* ${SSHDIR}

echo Key 1:
cat ${SSHDIR}/${KEYNAME}.pub
echo
echo Key 2:
cat ${NEWDIR}/${KEYNAME}.pub