- 追加された行はこの色です。
- 削除された行はこの色です。
#author("2023-05-29T21:29:58+09:00","","")
#author("2023-05-31T10:56:00+09:00","","")
#topicpath
////////////////////////////////////////////////////////////////////////////////
* 目次 [#x5ab1185]
#contents();
////////////////////////////////////////////////////////////////////////////////
* sshキー [#vfeba3cb]
//==============================================================================
** キーの生成 [#q8697dd5]
$ ssh-keygen -C account@example.com -f .ssh/account@example.com.key
Generating public/private rsa key pair.
$ ssh-keygen -t ed25519 -C account@hostname
Generating public/private ed25519 key pair.
Enter file in which to save the key (/home/account/.ssh/id_ed25519):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in .ssh/account@example.com.key.
Your public key has been saved in .ssh/account@example.com.key.pub.
Your identification has been saved in /home/account/.ssh/id_ed25519
Your public key has been saved in /home/account/.ssh/id_ed25519.pub
The key fingerprint is:
ba:53:a5:59:8b:97:18:f4:d3:d3:08:a1:47:35:25:1d account@example.com
SHA256:6rp4b8YlVK5k8auztiFK5QuZsjQIRCf5yFBrkUS50Xg account@hostname
The key's randomart image is:
+---[RSA 2048]----+
| oo+oE. |
| .o. o. |
| ....o o |
| ..= + . |
| SO + . |
| .* + |
| .. . |
| .. |
| .. |
+-----------------+
+--[ED25519 256]--+
| *** |
|o.BoE . . |
|o.=+ = |
|.+.. + o |
|. .+ .S. |
|o = o.o |
|oo= o.o+ |
|.+.+.+B. |
|. o.+B=+ |
+----[SHA256]-----+
$
- -t オプション
-- 指定しなければ、 default で RSA が選択される
-- ed25519 は、Ed25519 アルゴリズムを指定するもの。これは RSA よりもパフォーマンスと耐攻撃性に優れているとされる。
////////////////////////////////////////////////////////////////////////////////
* 公開鍵認証の設定 [#v5e2575a]
+ ローカルにて
-- ssh キーを ~/.ssh/authorized_keys に登録する
[user@exaple.com:0 .ssh]$ ssh-copy-id user@exaple.com
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
user@exaple.com's password:
Permission denied, please try again.
user@exaple.com's password:
Number of key(s) added: 1
Now try logging into the machine, with: "ssh 'user@exaple.com'"
and check to make sure that only the key(s) you wanted were added.
//==============================================================================
** ssh-agent / ssh-add [#s2cd56ab]
- ssh-agent と ssh-add を用いてセッションを維持し、そこではパスフレーズを毎回入力しなくても良いようにする
$ ssh-agent bash
$ ssh-add ~/.ssh/<ssh-key-file>
Enter passphrase for ${HOME}/.ssh/<ssh-key-file>:
Identity added: ${HOME}/.ssh/<ssh-key-file> (${HOME}/.ssh/<ssh-key-file>)
$
////////////////////////////////////////////////////////////////////////////////
* ssh で接続できないとき [#t97f89a4]
+ デバッグモードで接続してみる
$ ssh -vvv ${REMOTE_HOST}
+ ログを見てみる(要管理者権限)
$ less /var/log/auth.log
////////////////////////////////////////////////////////////////////////////////
* Links [#b112913e]