SSH Keys: Difference between revisions
cats |
fixed codeblcoks |
||
| Line 49: | Line 49: | ||
'''Most Secure Keys''' | '''Most Secure Keys''' | ||
< | <pre> | ||
ssh-keygen -t ssh-ed25519 -C "[email protected]" | ssh-keygen -t ssh-ed25519 -C "[email protected]" | ||
</ | </pre> | ||
'''Advanced ED25519 Command''' | '''Advanced ED25519 Command''' | ||
< | <pre> | ||
ssh-keygen -t ed25519 -C "[email protected]" -f ~/.ssh/username_id_ed25519 -N "your_passphrase" | ssh-keygen -t ed25519 -C "[email protected]" -f ~/.ssh/username_id_ed25519 -N "your_passphrase" | ||
</ | </pre> | ||
'''Compatible and Secure''' | '''Compatible and Secure''' | ||
< | <pre> | ||
ssh-keygen -t rsa -b 4096 -C "[email protected]" | ssh-keygen -t rsa -b 4096 -C "[email protected]" | ||
</ | </pre> | ||
Follow the prompts to save the key, typically in <code>~/.ssh/id_rsa</code>. | Follow the prompts to save the key, typically in <code>~/.ssh/id_rsa</code>. | ||
| Line 80: | Line 80: | ||
To use your SSH key for connecting to a server, add your public key to the <code>~/.ssh/authorized_keys</code> file on the server: | To use your SSH key for connecting to a server, add your public key to the <code>~/.ssh/authorized_keys</code> file on the server: | ||
< | <pre> | ||
ssh-add ~/.ssh/username_id_ed25519 | ssh-add ~/.ssh/username_id_ed25519 | ||
</ | </pre> | ||
After this, you can log in to the server (remote) with <code>ssh [email protected]</code>. If you are prompted for your PIN, it is the PIN you created when generating your SSH keys. | After this, you can log in to the server (remote) with <code>ssh [email protected]</code>. If you are prompted for your PIN, it is the PIN you created when generating your SSH keys. | ||
| Line 88: | Line 88: | ||
You may also SSH directly to a server without adding your SSH key to the server’s <code>~/.ssh/authorized_keys</code> file: | You may also SSH directly to a server without adding your SSH key to the server’s <code>~/.ssh/authorized_keys</code> file: | ||
< | <pre> | ||
ssh -i ~/.ssh/username_id_ed25519 username@hostname | ssh -i ~/.ssh/username_id_ed25519 username@hostname | ||
</ | </pre> | ||
<span id="using-with-git"></span> | <span id="using-with-git"></span> | ||
| Line 100: | Line 100: | ||
To use your SSH key with private Git repositories, add the key to your SSH agent and configure the repository URL to use SSH: | To use your SSH key with private Git repositories, add the key to your SSH agent and configure the repository URL to use SSH: | ||
< | <pre> | ||
ssh-add ~/.ssh/username_id_ed25519 | ssh-add ~/.ssh/username_id_ed25519 | ||
git remote set-url origin [email protected]:username/repo.git | git remote set-url origin [email protected]:username/repo.git | ||
</ | </pre> | ||
<span id="using-to-sign-git-commits"></span> | <span id="using-to-sign-git-commits"></span> | ||
| Line 110: | Line 110: | ||
To sign Git commits with your SSH key, configure Git to use the key: | To sign Git commits with your SSH key, configure Git to use the key: | ||
< | <pre> | ||
git config --global user.signingkey <your-key-id> | git config --global user.signingkey <your-key-id> | ||
git config --global commit.gpgSign true | git config --global commit.gpgSign true | ||
</ | </pre> | ||
<span id="using-gpg-keys-for-ssh-authentication"></span> | <span id="using-gpg-keys-for-ssh-authentication"></span> | ||
| Line 123: | Line 123: | ||
If you don’t already have a GPG key pair, generate one: | If you don’t already have a GPG key pair, generate one: | ||
< | <pre> | ||
gpg --full-generate-key | gpg --full-generate-key | ||
</ | </pre> | ||
Follow the prompts to create your key pair. | Follow the prompts to create your key pair. | ||
| Line 134: | Line 134: | ||
Edit or create the <code>~/.gnupg/gpg-agent.conf</code> file to include the following line: | Edit or create the <code>~/.gnupg/gpg-agent.conf</code> file to include the following line: | ||
< | <pre> | ||
enable-ssh-support | enable-ssh-support | ||
</ | </pre> | ||
<span id="starting-the-gpg-agent"></span> | <span id="starting-the-gpg-agent"></span> | ||
| Line 143: | Line 143: | ||
Start or reload the GPG agent: | Start or reload the GPG agent: | ||
< | <pre> | ||
gpg-connect-agent updatestartuptty /bye | gpg-connect-agent updatestartuptty /bye | ||
</ | </pre> | ||
<span id="extracting-the-ssh-public-key-from-your-gpg-key"></span> | <span id="extracting-the-ssh-public-key-from-your-gpg-key"></span> | ||
| Line 152: | Line 152: | ||
Use the following command to extract the SSH public key from your GPG key: | Use the following command to extract the SSH public key from your GPG key: | ||
< | <pre> | ||
ssh-add -L | ssh-add -L | ||
</ | </pre> | ||
If the key is not listed, you can add it manually: | If the key is not listed, you can add it manually: | ||
< | <pre> | ||
gpg --export-ssh-key <your-gpg-key-id> | gpg --export-ssh-key <your-gpg-key-id> | ||
</ | </pre> | ||
Replace <code><your-gpg-key-id></code> with your actual GPG key ID. | Replace <code><your-gpg-key-id></code> with your actual GPG key ID. | ||
| Line 174: | Line 174: | ||
Ensure your SSH client is configured to use the GPG agent by adding the following to your <code>~/.bashrc</code> or <code>~/.zshrc</code>: | Ensure your SSH client is configured to use the GPG agent by adding the following to your <code>~/.bashrc</code> or <code>~/.zshrc</code>: | ||
< | <pre> | ||
export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket) | export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket) | ||
</ | </pre> | ||
Reload your shell configuration: | Reload your shell configuration: | ||
< | <pre> | ||
source ~/.bashrc ## or source ~/.zshrc | source ~/.bashrc ## or source ~/.zshrc | ||
</ | </pre> | ||
By following these steps, you can use your GPG key for SSH authentication, leveraging the benefits of GPG key management. | By following these steps, you can use your GPG key for SSH authentication, leveraging the benefits of GPG key management. | ||
| Line 194: | Line 194: | ||
Use <code>ssh-agent</code> to manage your keys and avoid entering the passphrase multiple times: | Use <code>ssh-agent</code> to manage your keys and avoid entering the passphrase multiple times: | ||
< | <pre> | ||
eval "$(ssh-agent -s)" | eval "$(ssh-agent -s)" | ||
ssh-add ~/.ssh/username_id_ed25519 | ssh-add ~/.ssh/username_id_ed25519 | ||
</ | </pre> | ||
<span id="keypassxc"></span> | <span id="keypassxc"></span> | ||