Pages - Menu

標籤

AWS (1) bash (1) Boost (2) C (2) CMake (2) Concurrency_Programming (3) CPP (37) Database (2) DNS (1) Docker (4) Docker-Compose (1) ELK (1) emacs (4) gcp (1) gdrive (1) git (1) gitbash (2) gitlab (1) kvm (4) Linux (5) MT4 (4) MT5 (4) Multicast (2) MySQL (2) Nijatrader8 (1) OpenCV (1) Python (4) QT5 (1) R (1) rdp (3) screenshot (1) ssh (3) Tabnine (1) TCP (1) TensorFlow (1) Tools (12) Ubuntu_1904 (11) Ubuntu_20_04 (5) UDP (1) VS2010 (1) VS2015 (1) VS2019 (1) WebServer (1) Win10 (1) winmerge (1) WSL (1) xrdp (1)

搜尋此網誌

2019年6月6日星期四

Openssh server setup for public key login only

Aim

OS: ubuntu 18.04 64 bit
We want to have a ssh server that only accept login through rsa public key.

Installation

$ sudo apt-get install openssh-client openssh-server openssl

Server setting


$ sudo sed -i 's/^PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh/sshd_config
$ sudo sed -i 's/^PubkeyAuthentication no/PubkeyAuthentication yes/' /etc/ssh/sshd_config
$ sudo vim /etc/ssh/sshd_config
------------------------------------
PubkeyAuthentication yes
PasswordAuthentication no
------------------------------------
$ sudo systemctl restart sshd.service 

Generate rsa key pairs

$ ssh-keygen -t rsa -b 4096 -C "testing@gmail.com"
Generating public/private rsa key pair.
Enter file in which to save the key (/home/sulfred/.ssh/id_rsa): id_testing
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in id_testing.
Your public key has been saved in id_testing.pub.
The key fingerprint is:
SHA256:6F/Pnyj3A96+qgSGrw4hQc+O2x2xrdBGA5lmznqllOY testing@gmail.com
The key's randomart image is:
+---[RSA 4096]----+
|  . .o           |
| . o=.           |
|  .=o.+          |
|   +*o.B         |
|  o=+oB S        |
|  .+E* = .  .    |
|  ..o + . o. o   |
|     . o o.oo.o. |
|     .o . .+==*o |
+----[SHA256]-----+

Add Authorized keys to server


$ cat id_testing.pub >> ~/.ssh/authorized_keys
$ ls -hal ~/.ssh
------------------------------------
-r--r--r--  1 you you  405 Jun  7 09:42 authorized_keys
-rw-------  1 you you 3.2K Jun  7 10:48 id_testing
-rw-r--r--  1 you you  743 Jun  7 10:48 id_testing.pub
------------------------------------
$ sudo service ssh restart

沒有留言:

發佈留言