Let me explain my question. I am working on an Internet Appliance device (IOT). The device currently runs an SSH server rather nicely. You can SSH to it and configure it, look at stats, etc. I now need to add a feature in which the device periodically uploads its logs via SFTP to a server that does not allow password logins/authentication, just public key.
For reasons that I won't bore you with here, it would be much more convenient if I could use the same public/private key pair for the SFTP session. Generating and storing a new key safely on this device is rather complicated. It is not Linux based device but rather runs a proprietary RTOS.
I cannot think of any security risks, but I thought I would ask. Is there something that I have overlooked? Is there a reason not to do this?
Only the public key is disclosed in either case.