Tectia SSH also supports certain other formats. Tectia SSH and OpenSSH both support the OpenSSH private key file format, so using that key file format is described here. However, the process is described here, as it can sometimes be necessary when, for example, an application is moved to Linux in the cloud and the destination server of a file transfer cannot easily be reconfigured to change an authorized key. It is rarely necessary to export a private key from PuTTY to Tectia SSH or OpenSSH. This will prompt for the new passphrase, and write the result back to keyfile.ppk with the new passphrase.ĮXPORTING A PRIVATE KEY TO TECTIA SSH OR OPENSSH Use the following command to change the passphrase: puttygen keyfile.ppk -P These instructions can also be used to add a passphrase to a key that was created without one. Just changing the passphrase is no substitute, but it is better than nothing. The Universal SSH Key Manager can automate this. It is recommended that all SSH keys be regenerated and changed periodically. See configuring public key authentication for PuTTY. Configure PuTTY to use your private key file (here keyfile.ppk). Then log into the server, edit the authorized_keys file with your favorite editor, and cut-and-paste the public key output by the above command to the authorized_keys file. To extract the public key, use: puttygen -L keyfile.ppk With both Tectia SSH and OpenSSH servers, access to an account is configured by generating a public key, copying the public key to the server, and adding the public key to a ~/.ssh/authorized_keys file. INSTALLING THE PUBLIC KEY AS AN AUTHORIZED KEY ON A SERVER Key files used for automation (e.g., with WinSCP should generally have an empty passphrase. It is strongly recommended that a passphrase be used for key files intended for interactive use. To create a new key pair for authentication from the command line, use something like: puttygen -t rsa -b 2048 -C -o keyfile.ppk For example, in Debian Linux, the following command will install it: sudo aptitude install putty-toolsĬREATING A NEW KEY PAIR FOR AUTHENTICATION In some Linux distributions, the puttygen tool needs to be installed separately from the Putty client. I think this will sort it out your issue.
0 kommentar(er)
