[系统] SSH Key 使用

SSH Key

Secure Shell (SSH) 是一个允许两台电脑之间通过安全的连接进行数据交换的网络协议。通过加密保证了数据的保密性和完整性。

对称加密只需要一个密钥，非对称加密需要两个密钥成对使用，分为公钥（public key）和私钥（private key）
如果使用私钥加密（这个过程一般称为“签名”），只有使用对应的公钥解密。

SSH 密钥登录采用的是非对称加密，每个用户通过自己的密钥登录

SSH服务端和客户端程序

OpenSSH (OpenBSD Secure Shell) 是一套使用ssh协议，通过计算机网络，提供加密通讯会话的计算机程序。

如果需要作为ssh的服务端，则需要安装openssh。

如果仅是作为ssh客户端，直接使用ssh命令即可。

生成密钥

默认生成在 /c/Users/Administrator/.ssh/id_dsa, id_dsa 是私钥, id_dsa.pub 是公钥

ssh-keygen -t rsa -f ~/.ssh/id_rsa_mygithub -C "这里换成你的邮箱@163.com"
-t 参数用来指定密钥的加密算法，一般会选择 DSA 算法或 RSA 算法。如果省略该参数，默认使用 RSA 算法。
-f 指定文件名称，默认会生成 ~/.ssh/id_rsa / id_rsa_pub
-C 参数可以为密钥文件指定新的注释，格式为username@host。
-b 参数指定密钥的二进制位数。这个参数值越大，密钥就越不容易破解，但是加密解密的计算开销也会加大。一般来说，-b至少应该是1024，更安全一些可以设为2048或者更高。

Administrator@SKY-20211128AGK MINGW64 ~
$ cd ~

Administrator@SKY-20211128AGK MINGW64 ~
$ pwd
/c/Users/Administrator

Administrator@SKY-20211128AGK MINGW64 ~
$ ssh-keygen -t rsa -C doingself@163.com
Generating public/private rsa key pair.
Enter file in which to save the key (/c/Users/Administrator/.ssh/id_rsa): #直接回车, 输入文件名保存在当前目录
Enter passphrase (empty for no passphrase): #设置密码
Enter same passphrase again: #设置密码
Your identification has been saved in /c/Users/Administrator/.ssh/id_rsa
Your public key has been saved in /c/Users/Administrator/.ssh/id_rsa.pub
The key fingerprint is:
SHA256:K5/DNboqsok0mSEHteatAmgDot+6DXkz5uQJlUJw+kc doingself@163.com
The key's randomart image is:
+---[RSA 3072]----+
|. o              |
| = .             |
|= + E            |
|=* o .           |
|=+= =   S        |
|+o=B     .o      |
|.=* B ...o .     |
|.oo%.+ o+.       |
|. =+=...+o       |
+----[SHA256]-----+

Administrator@SKY-20211128AGK MINGW64 ~
$

查看电脑的所有公钥

Administrator@SKY-20211128AGK MINGW64 ~
$ ls -l ~/.ssh/id_*.pub
-rw-r--r-- 1 Administrator 197121 607 Feb 27 20:33 /c/Users/Administrator/.ssh/id_dsa.pub

使用私钥

ssh-agent 命令让用户在整个 Bash 对话（session）之中，只在第一次使用 SSH 命令时输入密码，然后将私钥保存在内存中，后面都不需要再输入私钥的密码了。

eval `ssh-agent`: 当前对话启用ssh-agent
ssh-agent: 查看环境
ssh-add id_rsa: 添加私钥
ssh-add -l: 查看所有已经添加的私钥
ssh-add -d name-of-key-file: 从内存中删除指定的私钥

Administrator@SKY-20211128AGK MINGW64 ~
$ eval `ssh-agent`
Agent pid 2848

Administrator@SKY-20211128AGK MINGW64 ~
$ ssh-agent
SSH_AUTH_SOCK=/tmp/ssh-TgBvWGD1C8rS/agent.2852; export SSH_AUTH_SOCK;
SSH_AGENT_PID=2853; export SSH_AGENT_PID;
echo Agent pid 2853;

Administrator@SKY-20211128AGK MINGW64 ~
$ ssh-add ~/.ssh/id_rsa
Enter passphrase for /c/Users/Administrator/.ssh/id_rsa:
Identity added: /c/Users/Administrator/.ssh/id_rsa (doingself@163.com)

Administrator@SKY-20211128AGK MINGW64 ~
$ ssh-add -l
3072 SHA256:K5/DNboqsok0mSEHteatAmgDot+6DXkz5uQJlUJw+kc doingself@163.com (RSA)

Administrator@SKY-20211128AGK MINGW64 ~
$

使用公钥

打开 Github SSH and GPG Keys
Title 自定义
完整复制公钥内容粘贴到 Key 中

测试

ssh -T git@github.com

Administrator@SKY-20211128AGK MINGW64 ~
$ ssh -T git@github.com
The authenticity of host 'github.com (20.205.243.166)' can't be established.
ED25519 key fingerprint is SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? y
Please type 'yes', 'no' or the fingerprint: yes
Warning: Permanently added 'github.com' (ED25519) to the list of known hosts.
Hi doingself! You've successfully authenticated, but GitHub does not provide shell access.

Administrator@SKY-20211128AGK MINGW64 ~
$

鸣谢

https://wangdoc.com/ssh/key.html

Mac 操作记录 (github + gitee 多账号配置)

简短截说

➜  ~ 
➜  ~ cd .ssh 
➜  .ssh 
➜  .ssh ssh-keygen -t rsa -f id_rsa_github_jiuan -C daviondk@163.com  
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in id_rsa_github_jiuan
Your public key has been saved in id_rsa_github_jiuan.pub
The key fingerprint is:
SHA256:i+nEkNjq/knk5LWU+85O0fP/ibjW5fFEmj/46Qgv+j4 daviondk@163.com
The key's randomart image is:
+---[RSA 3072]----+
|                 |
|                 |
|                 |
|   o . . .      .|
|  . * + S o    + |
|   * = = o o  oo.|
|  . + B o  .o +oo|
| . . + +   E++oo=|
| .o.o .o=.==+++*o|
+----[SHA256]-----+
➜  .ssh 
➜  .ssh 
➜  .ssh ls -l
total 72
-rw-r--r--  1 jiuan  staff   281  6 28 09:23 config
-rw-------  1 jiuan  staff  2655  6 21 16:31 id_rsa_gitee
-rw-r--r--  1 jiuan  staff   570  6 21 16:31 id_rsa_gitee.pub
-rw-------  1 jiuan  staff  2655  7 21 16:11 id_rsa_github
-rw-r--r--  1 jiuan  staff   570  7 21 16:11 id_rsa_github.pub
-rw-------  1 jiuan  staff  2602  6 23 15:53 id_rsa_gitlab
-rw-r--r--  1 jiuan  staff   570  6 23 15:53 id_rsa_gitlab.pub
-rw-------  1 jiuan  staff   836  7 21 16:05 known_hosts
-rw-r--r--  1 jiuan  staff   182  6 23 16:10 known_hosts.old
➜  .ssh 
➜  .ssh vim config


# github
Host github_haha
HostName github.com
User git
IdentityFile /Users/cityfruit/.ssh/id_rsa_github

#gitee
Host gitee_hehe
HostName gitee.com
PreferredAuthentications publickey
IdentityFile /Users/cityfruit/.ssh/id_rsa_gitee

# private gitLab.com server
Host gitlab.company.com
RSAAuthentication yes
IdentityFile ~/.ssh/id_rsa_gitlab
~
~
➜  .ssh  
➜  .ssh cd ~
➜  ~ vim .bash_profile 

ssh-add ~/.ssh/id_rsa_gitee
ssh-add ~/.ssh/id_rsa_gitlab
ssh-add ~/.ssh/id_rsa_github
~
~
➜  ~ 
➜  ~ source .bash_profile   
➜  ~ 
➜  ~

详细

重点: remote 使用 .ssh/config 配置的 Host

Last login: Tue May 31 14:42:53 on ttys003
 cityfruit@shiyanchaodeMBP  ~/.ssh  pwd
/Users/cityfruit/.ssh
 cityfruit@shiyanchaodeMBP  ~/.ssh  ssh-keygen -t rsa -C daviondk@163.com 
Generating public/private rsa key pair.
Enter file in which to save the key (/Users/cityfruit/.ssh/id_rsa): id_rsa_gitee_3138
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in id_rsa_gitee_3138
Your public key has been saved in id_rsa_gitee_3138.pub
The key fingerprint is:
SHA256:p85fEqGsIQIqx0bVJTG/6A/JWmEG85hpCwaTP+i+QKI daviondk@163.com
The key is randomart image is:
+---[RSA 3072]----+
|    ..+o.        |
| . .  .+         |
|= . o   . .      |
|.O   B o o .     |
|=.X * B S o      |
|*+ = B = o .     |
|E.  . B . . .    |
|o    o =   o     |
| o. .   +..      |
+----[SHA256]-----+
 cityfruit@shiyanchaodeMBP  ~/.ssh  eval $(ssh-agent -s)
Agent pid 16081
 cityfruit@shiyanchaodeMBP  ~/.ssh  ls                        
id_rsa                id_rsa_gitee_3138     known_hosts
id_rsa.pub            id_rsa_gitee_3138.pub known_hosts.old
 cityfruit@shiyanchaodeMBP  ~/.ssh  ssh-add id_rsa_gitee_3138
Enter passphrase for id_rsa_gitee_3138: 
Identity added: id_rsa_gitee_3138 (daviondk@163.com)
 cityfruit@shiyanchaodeMBP  ~/.ssh  touch config
 cityfruit@shiyanchaodeMBP  ~/.ssh  
 cityfruit@shiyanchaodeMBP  ~/.ssh  vim config


# github
Host github_haha
HostName github.com
User git
IdentityFile /Users/cityfruit/.ssh/id_rsa

#gitee
Host gitee_hehe
HostName gitee.com
PreferredAuthentications publickey
IdentityFile /Users/cityfruit/.ssh/id_rsa_gitee_3138

# private gitLab.com server
Host gitlab.company.com
RSAAuthentication yes
IdentityFile ~/.ssh/id_rsa_gitlab
~                                                                                                   
~                                                                                                   
 cityfruit@shiyanchaodeMBP  ~/.ssh  
 cityfruit@shiyanchaodeMBP  ~/.ssh  ls                                  
config                id_rsa.pub            id_rsa_gitee_3138.pub known_hosts.old
id_rsa                id_rsa_gitee_3138     known_hosts
 cityfruit@shiyanchaodeMBP  ~/.ssh  pbcopy < ~/.ssh/id_rsa_gitee_3138.pub
 cityfruit@shiyanchaodeMBP  ~/.ssh  
 cityfruit@shiyanchaodeMBP  ~/.ssh  
 cityfruit@shiyanchaodeMBP  ~/.ssh  ssh -T git@github.com 
Enter passphrase for key '/Users/cityfruit/.ssh/id_rsa': 
Hi doingself! You've successfully authenticated, but GitHub does not provide shell access.
 ✘ cityfruit@shiyanchaodeMBP  ~/.ssh  ssh -T git@github_haha
Enter passphrase for key '/Users/cityfruit/.ssh/id_rsa': 
Hi doingself! You've successfully authenticated, but GitHub does not provide shell access.
 ✘ cityfruit@shiyanchaodeMBP  ~/.ssh  
 ✘ cityfruit@shiyanchaodeMBP  ~/.ssh  ssh -T git@gitee.com  
git@gitee.com: Permission denied (publickey).
 ✘ cityfruit@shiyanchaodeMBP  ~/.ssh  ssh -T git@gitee_hehe 
Enter passphrase for key '/Users/cityfruit/.ssh/id_rsa_gitee_3138': 
Hi tiny! You've successfully authenticated, but GITEE.COM does not provide shell access.
 cityfruit@shiyanchaodeMBP  ~/.ssh  
 cityfruit@shiyanchaodeMBP  ~/.ssh 

Windows 10 操作记录 (github + gitee)

Admin@DESKTOP-BBFBUU0 MINGW64 ~
$ cd ~/.ssh/

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$ pwd
/c/Users/Admin/.ssh

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$ ssh-keygen -t rsa -f id_rsa_github_xy -C daviondk@163.com
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in id_rsa_github_xy
Your public key has been saved in id_rsa_github_xy.pub
The key fingerprint is:
SHA256:0u3jNJxmn7FXu0ofL0cU3PbWRsTaxV0jZRdnzc4OS0U daviondk@163.com
The key's randomart image is:
+---[RSA 3072]----+
|             .o@E|
|              o+/|
|               O=|
|       . .    + X|
|      . S .  . B |
|       . o .  . +|
|          X .. +.|
|         = +.++.+|
|          . +o.=o|
+----[SHA256]-----+

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$ ssh-keygen -t rsa -f id_rsa_gitee_xy -C daviondk@163.com
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in id_rsa_gitee_xy
Your public key has been saved in id_rsa_gitee_xy.pub
The key fingerprint is:
SHA256:ObWMU5DWnvbDRJym7xgvJqyQN+4kY1oB8T/74Gdx50U daviondk@163.com
The key's randomart image is:
+---[RSA 3072]----+
|  .     .o . .   |
|   o    o.. =    |
|  . .  . .o=     |
|   . .   *=.. E  |
|    . o S.o= .   |
|     o o.oo * .  |
|    B *. o B o   |
|   + O += + +    |
|  .  .=+.o .     |
+----[SHA256]-----+

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$ ll
total 10
-rw-r--r-- 1 Admin 197121 2602 Dec 23 17:33 id_rsa_gitee_xy
-rw-r--r-- 1 Admin 197121  570 Dec 23 17:33 id_rsa_gitee_xy.pub
-rw-r--r-- 1 Admin 197121 2602 Dec 23 17:33 id_rsa_github_xy
-rw-r--r-- 1 Admin 197121  570 Dec 23 17:33 id_rsa_github_xy.pub

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$ vim config

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$ cat config

# github
Host github.com
HostName github.com
PreferredAuthentications publickey
IdentityFile ~/.ssh/id_rsa_github_xy

# gitee
Host gitee.com
HostName gitee.com
PreferredAuthentications publickey
IdentityFile ~/.ssh/id_rsa_gitee_xy

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$ ssh -T git@gitee.com
Hi tiny! You've successfully authenticated, but GITEE.COM does not provide shell access.

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$ ssh -T git@github.com
Hi doingself! You've successfully authenticated, but GitHub does not provide shell access.

Admin@DESKTOP-BBFBUU0 MINGW64 ~/.ssh
$

最后编辑于：2022.12.23 17:44:38

人面猴
序言：七十年代末，一起剥皮案震惊了整个滨河市，随后出现的几起案子，更是在滨河造成了极大的恐慌，老刑警刘岩，带你破解...
沈念sama阅读 203,098评论 5赞 476
死咒
序言：滨河连续发生了三起死亡事件，死亡现场离奇诡异，居然都是意外死亡，警方通过查阅死者的电脑和手机，发现死者居然都...
沈念sama阅读 85,213评论 2赞 380
救了他两次的神仙让他今天三更去死
文/潘晓璐我一进店门，熙熙楼的掌柜王于贵愁眉苦脸地迎上来，“玉大人，你说我怎么就摊上这事。” “怎么了？”我有些...
开封第一讲书人阅读 149,960评论 0赞 336
道士缉凶录：失踪的卖姜人
文/不坏的土叔我叫张陵，是天一观的道长。经常有香客问我，道长，这世上最难降的妖魔是什么？我笑而不...
开封第一讲书人阅读 54,519评论 1赞 273
港岛之恋（遗憾婚礼）
正文为了忘掉前任，我火速办了婚礼，结果婚礼上，老公的妹妹穿的比我还像新娘。我一直安慰自己，他们只是感情好，可当我...
茶点故事阅读 63,512评论 5赞 364
恶毒庶女顶嫁案：这布局不是一般人想出来的
文/花漫我一把揭开白布。她就那样静静地躺着，像睡着了一般。火红的嫁衣衬着肌肤如雪。梳的纹丝不乱的头发上，一...
开封第一讲书人阅读 48,533评论 1赞 281
城市分裂传说
那天，我揣着相机与录音，去河边找鬼。笑死，一个胖子当着我的面吹牛，可吹牛的内容都是我干的。我是一名探鬼主播，决...
沈念sama阅读 37,914评论 3赞 395
双鸳鸯连环套：你想象不到人心有多黑
文/苍兰香墨我猛地睁开眼，长吁一口气：“原来是场噩梦啊……” “哼！你这毒妇竟也来了？” 一声冷哼从身侧响起，我...
开封第一讲书人阅读 36,574评论 0赞 256
万荣杀人案实录
序言：老挝万荣一对情侣失踪，失踪者是张志新（化名）和其女友刘颖，没想到半个月后，有当地人在树林里发现了一具尸体，经...
沈念sama阅读 40,804评论 1赞 296
护林员之死
正文独居荒郊野岭守林人离奇死亡，尸身上长有42处带血的脓包…… 初始之章·张勋以下内容为张勋视角年9月15日...
茶点故事阅读 35,563评论 2赞 319
白月光启示录
正文我和宋清朗相恋三年，在试婚纱的时候发现自己被绿了。大学时的朋友给我发了我未婚夫和他白月光在一起吃饭的照片。...
茶点故事阅读 37,644评论 1赞 329
活死人
序言：一个原本活蹦乱跳的男人离奇死亡，死状恐怖，灵堂内的尸体忽然破棺而出，到底是诈尸还是另有隐情，我是刑警宁泽，带...
沈念sama阅读 33,350评论 4赞 318
日本核电站爆炸内幕
正文年R本政府宣布，位于F岛的核电站，受9级特大地震影响，放射性物质发生泄漏。R本人自食恶果不足惜，却给世界环境...
茶点故事阅读 38,933评论 3赞 307
男人毒药：我在死后第九天来索命
文/蒙蒙一、第九天我趴在偏房一处隐蔽的房顶上张望。院中可真热闹，春花似锦、人声如沸。这庄子的主人今日做“春日...
开封第一讲书人阅读 29,908评论 0赞 19
一桩弑父案，背后竟有这般阴谋
文/苍兰香墨我抬头看了看天上的太阳。三九已至，却和暖如春，着一层夹袄步出监牢的瞬间，已是汗流浃背。一阵脚步声响...
开封第一讲书人阅读 31,146评论 1赞 259
情欲美人皮
我被黑心中介骗来泰国打工，没想到刚下飞机就差点儿被人妖公主榨干…… 1. 我叫王不留，地道东北人。一个月前我还...
沈念sama阅读 42,847评论 2赞 349
代替公主和亲
正文我出身青楼，却偏偏与公主长得像，于是被迫代替她去往敌国和亲。传闻我的和亲对象是个残疾皇子，可洞房花烛夜当晚...
茶点故事阅读 42,361评论 2赞 342