SSH Key Generation
SSH Key Generation
-----------------------------------------------------------------------------------
---------------------------------------------
pnukanabo@in-thanossim05:~/temp/keys$ ssh-keygen --help
unknown option -- -
usage: ssh-keygen [-q] [-b bits] [-t dsa | ecdsa | ed25519 | rsa]
[-N new_passphrase] [-C comment] [-f output_keyfile]
ssh-keygen -p [-P old_passphrase] [-N new_passphrase] [-f keyfile]
ssh-keygen -i [-m key_format] [-f input_keyfile]
ssh-keygen -e [-m key_format] [-f input_keyfile]
ssh-keygen -y [-f input_keyfile]
ssh-keygen -c [-P passphrase] [-C comment] [-f keyfile]
ssh-keygen -l [-v] [-E fingerprint_hash] [-f input_keyfile]
ssh-keygen -B [-f input_keyfile]
ssh-keygen -D pkcs11
ssh-keygen -F hostname [-f known_hosts_file] [-l]
ssh-keygen -H [-f known_hosts_file]
ssh-keygen -R hostname [-f known_hosts_file]
ssh-keygen -r hostname [-f input_keyfile] [-g]
ssh-keygen -G output_file [-v] [-b bits] [-M memory] [-S start_point]
ssh-keygen -T output_file -f input_file [-v] [-a rounds] [-J num_lines]
[-j start_line] [-K checkpt] [-W generator]
ssh-keygen -s ca_key -I certificate_identity [-h] [-U]
[-D pkcs11_provider] [-n principals] [-O option]
[-V validity_interval] [-z serial_number] file ...
ssh-keygen -L [-f input_keyfile]
ssh-keygen -A
ssh-keygen -k -f krl_file [-u] [-s ca_public] [-z version_number]
file ...
ssh-keygen -Q -f krl_file file ...
pnukanabo@in-thanossim05:~/temp/keys$ ssh-keygen -N '' -t ecdsa -b 521 -f
nopvtsshkey
Generating public/private ecdsa key pair.
Your identification has been saved in adminkey.
Your public key has been saved in adminkey.pub.
The key fingerprint is:
SHA256:EIbuhws6Hq9E9nxmWskFWLl9lCxQmhuqG6tvltiifUQ pnukanabo@in-thanossim05
The key's randomart image is:
+---[ECDSA 521]---+
| +*.. . |
| +ooo + |
| o =+ o |
| E.+o . |
| o + o .S |
|o = = + |
| O * X |
|*.@ O |
|*@++ |
+----[SHA256]-----+
pnukanabo@in-thanossim05:~/temp/keys$
pnukanabo@in-thanossim05:~/temp/keys$ ls -l adminkey
-rw------- 1 pnukanabo pnukanabo 748 Jul 7 02:25 adminkey
pnukanabo@in-thanossim05:~/temp/keys$ ls -l adminkey*
-rw------- 1 pnukanabo pnukanabo 748 Jul 7 02:25 adminkey
-rw-r--r-- 1 pnukanabo pnukanabo 278 Jul 7 02:25 adminkey.pub
pnukanabo@in-thanossim05:~/temp/keys$ cat adminkey.pub
ecdsa-sha2-nistp521
AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGrLp0VlR7r/sArpCCqllt6Eg8TCOQ
oEdkL2itVocfcs/kGzXryl71wPsK1+xu5vKFHw48rEN+VMc9HXjFsPr80egCTBFkRkhnd0eznIWJEiK1RVn
PH/CskZuSDVg/tS7muiNeFkIeMwJf0N98NBKPX8FMZqsvRFxwlm7xYfZB388cu/A==
pnukanabo@in-thanossim05
pnukanabo@in-thanossim05:~/temp/keys$ ^C
pnukanabo@in-thanossim05:~/temp/keys$ cut -d' ' -f2 adminkey.pub
AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGrLp0VlR7r/sArpCCqllt6Eg8TCOQ
oEdkL2itVocfcs/kGzXryl71wPsK1+xu5vKFHw48rEN+VMc9HXjFsPr80egCTBFkRkhnd0eznIWJEiK1RVn
PH/CskZuSDVg/tS7muiNeFkIeMwJf0N98NBKPX8FMZqsvRFxwlm7xYfZB388cu/A==
-----------------------------------------------------------------------------------
---------------------------------------------
[ ne ]
temproot@GX> show ssh-authorized-key
ERROR: object does not exist
[ ne ]
temproot@GX>
[ ne ]
temproot@GX>
[ ne ]
temproot@GX>
[ ne ]
temproot@GX> add ssh-authorized-key-admin/3 public-key
AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGrLp0VlR7r/sArpCCqllt6Eg8TCOQ
oEdkL2itVocfcs/kGzXryl71wPsK1+xu5vKFHw48rEN+VMc9HXjFsPr80egCTBFkRkhnd0eznIWJEiK1RVn
PH/CskZuSDVg/tS7muiNeFkIeMwJf0N98NBKPX8FMZqsvRFxwlm7xYfZB388cu/A==
[ ne ]
temproot@GX> show ssh-authorized-key
ssh-authorized-key public-key-algorithm
-------------------------- --------------------
ssh-authorized-key-admin/1 ecdsa-sha2-nistp521
ssh-authorized-key public-key
->
--------------------------
-----------------------------------------------------------------------------------
------------->
ssh-authorized-key-admin/1
AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGrLp0VlR7r/sArpCCqllt6Eg8TCOQ
oEdkL2itVocf->
ssh-authorized-key label
-------------------------- -----
ssh-authorized-key-admin/1
-----------------------------------------------------------------------------------
----------------------------------------