CH-J Toolsupravljanje poslužiteljima preko SSH
Meni
Svi primjeri SSH ključeva →

Primjer 04 · RSA 3072

RSA ključ: najšire podržana vrsta SSH ključa. Potpisi koriste rsa-sha2-512; stari potpisi ssh-rsa sa SHA-1 onemogućeni su u suvremenom OpenSSH. Veći ključevi su sporiji, ali imaju veću sigurnosnu rezervu.

Pregled ključa

Vrsta ključaRSA 3072
Naziv SSH algoritmassh-rsa · signatures rsa-sha2-512
PodrškaŠiroka podrška; suvremeni OpenSSH zahtijeva potpise RSA-SHA2 (rsa-sha2-256 ili rsa-sha2-512) jer su potpisi ssh-rsa sa SHA-1 onemogućeni prema zadanim postavkama od OpenSSH 8.8
Format privatnog ključaOpenSSH (openssh-key-v1), unencrypted
OtisakSHA256:HS3S7ghNmNJ8H0+gMwQBxkihRgCChGVIS8mYRsy0K7g

Javni ključ

Javni ključ u formatu authorized_keys. Dodajte ga u datoteku allowed_signers za provjeru potpisa u nastavku.

Preuzmi → 572 bajtovi

ssh-rsa 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 ch-j-ssh-example-04

Privatni ključ

Nešifrirani privatni ključ. Objavljen isključivo za testiranje: svatko ga može upotrijebiti.

Preuzmi → 2 610 bajtovi

Prikaži
-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----

Potpis datoteke test_1MB.bin

Odvojeni SSH potpis (SSHSIG, imenski prostor „file“) datoteke test_1MB.bin izrađen ovim ključem u CH-J Tools. Spremite ga kao test_1MB.bin.sig uz testnu datoteku.

Preuzmi → 1 211 bajtovi

-----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----

Opoziv

SSH ključevi nemaju certifikat opoziva. Da biste opozvali ključ, uklonite ga iz authorized_keys ili ga dodajte na popis opozvanih ključeva OpenSSH (KRL, izrađen naredbom ssh-keygen -k) koji poslužitelj čita putem RevokedKeys.

Provjeri potpis

Spremite javni ključ i potpis uz test_1MB.bin, izradite datoteku allowed_signers i pokrenite ssh-keygen:

echo "example@ch-j $(cat id_rsa.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I example@ch-j -n file -s test_1MB.bin.sig < test_1MB.bin