Igama
ssh-keygen - ukukhiqiza ukhiye wokuqinisekisa, ukuphathwa nokuguqulwa
Isiqubulo
ssh-keygen [- q ] [- b bits ] - t thayela [- N new_passphrase ] [- C ukuphawula ] [- f output_keyfile ]
ssh-keygen - p [- P ubudala_passphrase ] [- N entsha_passphrase ] [- f keyfile ]
i-ssh-keygen - i [- f input_keyfile ]
ssh-keygen - e [- f input_keyfile ]
i-ssh-keygen - y [- f input_keyfile ]
ssh-keygen - c [- P passphrase ] [- C ukuphawula ] [- f keyfile ]
ssh-keygen - l [- f input_keyfile ]
ssh-keygen - B [- f input_keyfile ]
ssh-keygen - umfundi weD
ssh-keygen - u-U umfundi [- f input_keyfile ]
Incazelo
I-ssh-keygen idala, ilawula futhi iguqula okhiye bokufakazela ubuqiniso be-ssh (1). i-ssh-keygen ingadala ukhiye we-RSA ukuthi usebenzise yi-SSH protocol version 1 kanye ne-RSA noma i-DSA okhiye okusetshenziswe ngu-SSH protocol version 2. Uhlobo lokukhiya olwenziwe lubekwe ngokukhethwa kukho.
Ngokuvamile umsebenzisi ngamunye ofisa ukusebenzisa i-SSH nge-RSA noma i-DSA ukuqinisekiswa ugijima ngalesi sikhathi ukudala ukhiye wokuqinisekisa ku-$ HOME / .ssh / identity $ HOME / .ssh / id_dsa noma $ HOME / .ssh / id_rsa Ngaphezu kwalokho, umlawuli wesistimu angasebenzisa lokhu ukukhiqiza okhiye bokusingatha, njengoba kuboniswe ku / njll / rc
Ngokuvamile lolu hlelo ludala ukhiye futhi lucela ifayela lapho kufanele lugcine khona ukhiye wangasese. Ukhiye womphakathi ugcinwe efayeleni enegama elifanayo kodwa `` .pub '' ihlanganisiwe. Lolu hlelo lubuye lucele i-passphrase. Umshwana wokungena ungase ube nalutho ukuze ungabonisi igama lokungena (izihluthulelo zokusingatha kufanele zibe nombhalo wesigcawu ongenalutho), noma kungenzeka kube yochungechunge lobude obungapheliyo. I- passphrase ifana nephasiwedi, ngaphandle kokuthi ingaba inkulumo enezinhlu zamagama, izimpawu zokubhala, izinombolo, indawo ye-whitespace, noma yikuphi uhlamvu lwezinhlamvu ozifunayo. Ama-passphrases amahle angamahlamvu angu-10-30 ubude, awasho imisho elula noma engaqondakali kalula (i-prose ye-English inezinhlamvu ezingu-1-2 kuphela ze-entropy ngayinye, futhi ihlinzeka ngama-passphrases amabi kakhulu), futhi iqukethe ukuhlanganiswa kwamagama aphezulu naphansi, izinombolo, nezinhlamvu ezingezona ezibalula. I-passphrase ingashintshwa kamuva ngokusebenzisa inketho ye- p .
Ayikho indlela yokubuyisela i-passphrase elahlekile. Uma i-passphrase ilahlekile noma ikhohliwe, ukhiye omusha kufanele ukhiqizwe bese ukopishwa ukhiye womphakathi ohambelana neminye imishini.
Ngokhiye we-RSA1, kukhona nensizakalo yokuphawula kufayela eliyisihluthulelo elilula kuphela kumsebenzisi ukusiza ukukhomba ukhiye. Amazwana angatshela lokho okhiye, noma yini ewusizo. Amazwana aqaliswa ku `` user_ host '' uma ukhiye udalwa kodwa kungashintshwa usebenzisa ukhetho - c .
Ngemuva kwesihluthulelo sakhiwe, imiyalelo engezansi imininingwane lapho okhiye kufanele bafakwe khona ukuze kusebenze.
Izinketho zilandelayo:
-b bits
Icacisa inani lezinkinobho kusihluthulelo sokudala. Okuncane okungu-512 bits. Ngokuvamile, ama-bits angu-1024 kubhekwa njengelanele, namasayizi amakhulu ngaphezulu angasathuthukisi ukuphepha kodwa enze izinto zihambe kancane. Okuzenzakalelayo yi-1024 bits.
-c
Icela ukushintsha amazwana emafayeleni angasese nakwasesidlangalaleni. Lokhu kusebenza kusekelwa kuphela okhiye be-RSA1. Lolu hlelo luzokwenza ifayela eliqukethe okhiye abangezimele, okwenqamula igama uma ukhiye unomunye, kanye nokuphawula okusha.
-e
Lolu khetho luzofunda ifayela eliyisihluthulelo eliyimfihlo noma le-OpenSSH yomphakathi bese uprinta ukhiye 'kwefomethi yefomethi yomkhiqizo womphakathi we-SECSH' ukuze uhambe. Lolu khetho luvumela ukhiye wokuthumela okusetshenziselwa ukufezwa kwezinhlelo eziningi ze-SSH ezentengiso.
-f igama lefayela
Icacisa igama lomsebenzisi wefayela eliyisihluthulelo.
-i
Lolu khetho luzofunda ifayela elingasese elingabhalisiwe (noma lesidlangalaleni) ekufomeni ehambisanayo ne-SSH2 futhi iphrinta ukhiye wangasese ovulekile (noma osesidlangalaleni) ohambisana no-OpenSSH ukuze uhambe. I-ssh-keygen iphinda ifunde 'Imfomethi Yefayela Yomphakathi Yenkampani Ye-SECSH' Le ndlela ivumela ukungenisa izihluthulelo kusuka ekusebenziseni okuningi kwe-SSH yokuhweba.
-l
Bonisa iminwe yeminwe yefayela lekhiye yomphakathi elicacisiwe. Izikhiye ze-RSA1 ezizimele nazo zisekelwa. Ngokhiye we-RSA no-DSA ssh-keygen uzama ukuthola ifayela eliyisihluthulelo esivela esidlangalaleni bese uprinta izigxivizo zeminwe.
-p
Icela ukuguqula umbhalo wesigcawu sefayela lesikhiye yangasese kunokudala ukhiye omusha wangasese. Lolu hlelo luzokwenza ifayela eliqukethe ukhiye wangasese, we-passphrase endala, futhi kabili ku-passphrase entsha.
-q
Silence ssh-keygen Isetshenziswe ngu / etc / rc lapho udala ukhiye omusha.
-y
Lolu khetho luzofunda ifayela lefomethi ye-OpenSSH yangasese bese uprinta ukhiye womphakathi we-OpenSSH ukuze uhambe.
-t thayipha
Icacisa uhlobo lenkinobho yokudala. Izindinganiso ezikhona zingezansi `` rsa1 '' ngenqubo yeprotocol 1 futhi `` rsa '' noma `` dsa '' ngenqubo yeprotocol 2.
-B
Bonisa i-bubblebabble digest yefayili eyimfihlo eyimfihlo noma yomphakathi.
-C ukuphawula
Inikeza ukuphawula okusha.
-D umfundi
Landa ukhiye womphakathi we-RSA ogcinwe kwi-smartcard kumfundi
-N entsha_passphrase
Inikeza umshwana wokungena omusha.
-P isitayela sokudlula
Inikeza i-passprase (endala).
-U umfundi
Layisha ukhiye wangasese we-RSA okhona kwi-smartcard kumfundi
BONA FUTHI
i-ssh (1)
J. Galbraith R. Thayer "Ifomethi yefayile yefayile yomphakathi ye-SECSH" i- draft-ietf-secsh -keykeyfile yomphakathi-01.txt March 2001 isebenza ngezinto eziqhubekayo
Okubalulekile: Sebenzisa umyalo womuntu ( % umuntu ) ukuze ubone ukuthi umyalo usetshenziswe kanjani kukhompyutha yakho ethile.