This is an old topic. I still have the same issue!
Reproduce sequence:
ssh-keygen -q -t dsa -f script.dsa -C "Mikrotik script" -N 'abcdef'
cp script.dsa.pub script.dsa.x.pub
scp script.dsa* router:
/user
remove [find name="script"]
group remove [find name="script"]
ssh-keys remove [find user="script"]
ssh-keys private remove [find user="script"]
group add name="script" policy=ssh
add name="script" group="script"
ssh-keys import user=script public-key-file=script.dsa.x.pub
ssh-keys private import user=script private-key-file=script.dsa public-key-file=script.dsa.pub passphrase="abcdef"
/system ssh host=127.0.0.1 user=script
group=full instead of group=script doesn’t help.