经过ssh的公钥/私钥方式远程登陆linux

时间 2020-02-12 标签经过 ssh 方式远程登陆 linux

1、经过 ssh-keygen命令建立认证文件

# ssh-keygen -b 1024 -t dsashell

Generating public/private dsa key pair.安全

Enter file in which to save the key (/root/.ssh/id_dsa): 服务器

Enter passphrase (empty for no passphrase): dom

Enter same passphrase again: ssh

Your identification has been saved in /root/.ssh/id_dsa.ide

Your public key has been saved in /root/.ssh/id_dsa.pub.spa

The key fingerprint is:code

...............................orm

The key's randomart image is:ci

.............................

若是没有更改路径的话，会在<userHome>/.ssh/目录下产生：id_dsa和id_dsa.pub两个文件。其中id_dsa是要加载到ssh客户端的，id_dsa.pub是服务器端的匹配文件。

2、使用ssh-copy-id命令将生成服务器端认证文件加载到对应服务器

# ssh-copy-id -i <认证文件保存的目录>/id_dsa.pub <user>@<host>

The authenticity of host '192.168.1.202 (192.168.1.202)' can't be established.
RSA key fingerprint is 46:8f:d3:43:db:52:b1:c2:16:99:cd:03:9b:3f:0c:e8.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.202' (RSA) to the list of known hosts.
<user>@<host>'s password: <服务器口令>
Now try logging into the machine, with "ssh '<user>@<host>'", and check in:

.ssh/authorized_keys

to make sure we haven't added extra keys that you weren't expecting.

3、修改服务器的ssh配置文件

RSAAuthentication yes PubkeyAuthentication yes AuthorizedKeysFile %h/.ssh/authorized_keys

4、将id_dsa加载到客户端

ssh客户端不少，这里只介绍Xshell（免费的为啥不用啊，\(^o^)/~）

properties -> Authentication -> method改为“Public key”，在Userkey中载入对应的认证文件

ok啦~没必要再用用户名、口令登陆了，方便了很多，安全了很多~