Panoramica della chiave
| Tipo di chiave | RSA 3072 |
|---|---|
| Nome dell’algoritmo SSH | ssh-rsa · signatures rsa-sha2-512 |
| Supporto | Ampiamente supportato; le versioni attuali di OpenSSH richiedono firme RSA-SHA2 (rsa-sha2-256 o rsa-sha2-512), poiché le firme ssh-rsa con SHA-1 sono disabilitate per impostazione predefinita da OpenSSH 8.8 |
| Formato della chiave privata | OpenSSH (openssh-key-v1), unencrypted |
| Impronta digitale | SHA256:HS3S7ghNmNJ8H0+gMwQBxkihRgCChGVIS8mYRsy0K7g |
Chiave pubblica
La chiave pubblica in formato authorized_keys. Aggiungila a un file allowed_signers per verificare la firma riportata sotto.
Scarica → 572 byte
ssh-rsa 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 ch-j-ssh-example-04Chiave privata
La chiave privata non cifrata. Pubblicata solo per i test: chiunque può usarla.
Scarica → 2 610 byte
Mostra
-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
Firma di test_1MB.bin
Firma SSH separata (SSHSIG, spazio dei nomi "file") di test_1MB.bin creata con questa chiave in CH-J Tools. Salvala come test_1MB.bin.sig accanto al file di test.
Scarica → 1 211 byte
-----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----
Revoca
Le chiavi SSH non hanno un certificato di revoca. Per revocare una chiave, rimuovila da authorized_keys oppure inseriscila in un elenco di revoca delle chiavi OpenSSH (KRL, creato con ssh-keygen -k) che il server legge tramite RevokedKeys.
Verifica la firma
Salva la chiave pubblica e la firma accanto a test_1MB.bin, crea un file allowed_signers ed esegui ssh-keygen:
echo "example@ch-j $(cat id_rsa.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I example@ch-j -n file -s test_1MB.bin.sig < test_1MB.bin