ssh-keygen 用于:生成、管理和轉(zhuǎn)換認(rèn)證密鑰。
常用參數(shù):
-t type:指定要生成的密鑰類型,有rsa1(SSH1),dsa(SSH2),ecdsa(SSH2),rsa(SSH2)等類型,較為常用的是rsa類型
-C comment:提供一個新的注釋
-b bits:指定要生成的密鑰長度 (單位:bit),對于RSA類型的密鑰,最小長度768bits,默認(rèn)長度為2048bits。DSA密鑰必須是1024bits
-f filename:指定生成的密鑰文件名字
Linux下使用ssky-keygen無密碼登錄服務(wù)器步驟:
1.使用ssh-keygen在本機(jī)上生成密鑰:
[Jiakun@Kunge ~]$ ssh-keygen -t rsa -C "aaa@gmail.com|bbb@126.com"
Generating public/private rsa key pair.
Enter file in which to save the key (/home/zzf/.ssh/id_rsa):[Enter key]
/home/zzf/.ssh/id_rsa already exists.
Overwrite (y/n)? y
Enter passphrase (empty for no passphrase):[Enter key]
Enter same passphrase again:[Enter key]
Your identification has been saved in /home/zzf/.ssh/id_rsa.
Your public key has been saved in /home/zzf/.ssh/id_rsa.pub.
The key fingerprint is:
ac:15:9d:97:2a:f3:43:ed:64:25:38:ad:54:d2:bd:c8 aaa@gmail.com|bbb@126.com
此時在本機(jī)上生成如下一個公鑰和一個私鑰文件:
[Jiakun@Kunge ~]$ ll ./.ssh/
總用量 12
-rw-------. 1 Jiakun Jiakun 1675 5月 19 19:44 id_rsa
-rw-r--r--. 1 Jiakun Jiakun 420 5月 19 19:44 id_rsa.pub
id_rsa是私鑰
id_rsa.pub是公鑰
將id_rsa.pub拷貝到目標(biāo)機(jī)器上家目錄的.ssh目錄中(沒.ssh目錄,自行創(chuàng)建),并將文件重命名為:authorized_keys,修改權(quán)限及屬主屬組:
mv id_rsa.pub authorized_keys
chmod 600 authorized_keys
chown zzf:zzf authorized_keys