We bring you the next part of our guide to setting up SSH on a server . In the first part, we show the basics of working with SSH keys . In this second part, we will discuss how SSH keys are generat on the client server and how the public key is distribut to the servers where they are to be us. It’s a good starter piece for those of you who have never generat keys before but now want to use them to increase the security of your connection.
Generation of SSH key pair
In order to authenticate with a remote server without a password, the first step is to generate a new pair of public and private SSH keys on the local computer. You should always authenticate with SSH keys unless you have a really good reason not to.
There are a number of cryptographic algorithms that can be us to generate SSH keys, includin south africa phone number data g RSA (initials of the cipher authors: Rivest, Shamir and Adleman), DSA and ECDSA. RSA keys are usually preferr and are also the default key type.
To generate a pair of RSA keys on the local computer, type:
Enter file in which to save the key
This prompt (Enter a file where to save the key) allows you to choose a location for the private RSA key. Press ENTER to leave the default location so it will be stor in a hidden .ssh directory inside your user home directory. If you leave the default location select, your SSH client will be able to find the keys automatically.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
The next prompt asks you to enter a passphrase of any length to secure the private key (you will have to enter it twice in a row). By default, you will have to type the passphrase you enter counterintuitive things i’ve learn about investing in lego over the past 18 months now every time you use this private key. It is actually an additional security measure. If you don’t want to use a passphrase, just press ENTER and leave it blank. However, keep in mind that anyone who somehow gains bw lists control of your private key will then be able to log into your servers.
If you choose to enter a passphrase, nothing is display as you type it.