ssh
Ceci est une ancienne révision du document !
Table des matières
La commande "ssh"
La page de man de ssh.
Générer une clé SSH
Générer une clé EdDSA (implémentation ed25519) :
$ ssh-keygen -t ed25519 Generating public/private ed25519 key pair. Enter file in which to save the key (/home/simon/.ssh/id_ed25519): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/simon/.ssh/id_ed25519. Your public key has been saved in /home/simon/.ssh/id_ed25519.pub. The key fingerprint is: SHA256:imFAWJVVN0MP8MJbwXgw4CWLcqWbZzQ1elGE8Tnjbgw simon@deb The key's randomart image is: +--[ED25519 256]--+ | oo..o=o@@X | |.. .= BoBoB | | o + * +.B . | | + + o = o | | = o E . | | . = . + | | . . + | | . | | | +----[SHA256]-----+
On ajoute la nouvelle clé au “ssh-agent” :
simon@localhost:~$ ssh-add .ssh/id_ed25519 Could not open a connection to your authentication agent. simon@localhost:~$ ssh-agent bash simon@localhost:~$ ssh-add .ssh/id_ed25519 Enter passphrase for .ssh/id_ed25519: Identity added: .ssh/id_ed25519 (.ssh/id_ed25519)
On envoie à présent la clé sur le serveur :
simon@localhost:~$ ssh-copy-id LOGIN@NOM-DE-DOMAINE.COM /usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed /usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys LOGIN@NOM-DE-DOMAINE.COM's password: Number of key(s) added: 1 Now try logging into the machine, with: "ssh 'LOGIN@NOM-DE-DOMAINE.COM'" and check to make sure that only the key(s) you wanted were added.
Plus qu'à se connecter, sans rentrer de code cette fois :
simon@localhost:~$ ssh LOGIN@NOM-DE-DOMAINE.COM LOGIN@HOST~$
Changer la passphrase d'une clé SSH
$ cd .ssh/ $ ssh-keygen -f id_rsa -p Enter old passphrase: Key has comment 'rsa w/o comment' Enter new passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved with the new passphrase.
Problèmes rencontrés
Problèmes de droits
$ ssh hostname Bad owner or permissions on /home/user/.ssh/config
Il faut avoir les bonnes permissions sur le fichier ~/.ssh/config
. Avant :
$ ls -alh ~/.ssh/config -rwxrwxrwx. 1 user user 324 30 mar 2016 /home/user/.ssh/config
Solution :
$ chmod 600 ~/.ssh/config
Après :
$ ls -alh ~/.ssh/config -rw-------. 1 user user 324 30 mar 2016 /home/user/.ssh/config
Exemples et astuces
- Reverse SSH, pour intervenir à distance sur un ordinateur derrière un NAT.
ssh.1524920894.txt.gz · Dernière modification : 2020/08/09 12:59 (modification externe)