#author("2023-05-31T10:56:00+09:00","","") #topicpath //////////////////////////////////////////////////////////////////////////////// * 目次 [#x5ab1185] #contents(); //////////////////////////////////////////////////////////////////////////////// * sshキー [#vfeba3cb] //============================================================================== ** キーの生成 [#q8697dd5] $ ssh-keygen -t ed25519 -C account@hostname Generating public/private ed25519 key pair. Enter file in which to save the key (/home/account/.ssh/id_ed25519): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/account/.ssh/id_ed25519 Your public key has been saved in /home/account/.ssh/id_ed25519.pub The key fingerprint is: SHA256:6rp4b8YlVK5k8auztiFK5QuZsjQIRCf5yFBrkUS50Xg account@hostname The key's randomart image is: +--[ED25519 256]--+ | *** | |o.BoE . . | |o.=+ = | |.+.. + o | |. .+ .S. | |o = o.o | |oo= o.o+ | |.+.+.+B. | |. o.+B=+ | +----[SHA256]-----+ $ - -t オプション -- 指定しなければ、 default で RSA が選択される -- ed25519 は、Ed25519 アルゴリズムを指定するもの。これは RSA よりもパフォーマンスと耐攻撃性に優れているとされる。 //////////////////////////////////////////////////////////////////////////////// * 公開鍵認証の設定 [#v5e2575a] + ローカルにて -- ssh キーを ~/.ssh/authorized_keys に登録する [user@exaple.com:0 .ssh]$ ssh-copy-id user@exaple.com /usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed /usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys user@exaple.com's password: Permission denied, please try again. user@exaple.com's password: Number of key(s) added: 1 Now try logging into the machine, with: "ssh 'user@exaple.com'" and check to make sure that only the key(s) you wanted were added. //============================================================================== ** ssh-agent / ssh-add [#s2cd56ab] - ssh-agent と ssh-add を用いてセッションを維持し、そこではパスフレーズを毎回入力しなくても良いようにする $ ssh-agent bash $ ssh-add ~/.ssh/<ssh-key-file> Enter passphrase for ${HOME}/.ssh/<ssh-key-file>: Identity added: ${HOME}/.ssh/<ssh-key-file> (${HOME}/.ssh/<ssh-key-file>) $ //////////////////////////////////////////////////////////////////////////////// * ssh で接続できないとき [#t97f89a4] + デバッグモードで接続してみる $ ssh -vvv ${REMOTE_HOST} + ログを見てみる(要管理者権限) $ less /var/log/auth.log //////////////////////////////////////////////////////////////////////////////// * Links [#b112913e]