Panoramica della chiave
| Tipo di chiave | RSA 4096 |
|---|---|
| Nome dell’algoritmo SSH | ssh-rsa · signatures rsa-sha2-512 |
| Supporto | Ampiamente supportato; le versioni attuali di OpenSSH richiedono firme RSA-SHA2 (rsa-sha2-256 o rsa-sha2-512), poiché le firme ssh-rsa con SHA-1 sono disabilitate per impostazione predefinita da OpenSSH 8.8 |
| Formato della chiave privata | OpenSSH (openssh-key-v1), unencrypted |
| Impronta digitale | SHA256:r87pfWBR4SuuEEn1C+YC0c+mntL4rZT3QGXF/+mD6jg |
Chiave pubblica
La chiave pubblica in formato authorized_keys. Aggiungila a un file allowed_signers per verificare la firma riportata sotto.
Scarica → 744 byte
ssh-rsa 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 ch-j-ssh-example-05Chiave privata
La chiave privata non cifrata. Pubblicata solo per i test: chiunque può usarla.
Scarica → 3 389 byte
Mostra
-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAACFwAAAAdzc2gtcn
NhAAAAAwEAAQAAAgEAwDXoWYvplMLU7lw1tT9iK6iHVPAOcgYuqRleq3Gy6EtAFYu7YYxj
cNozJTYZ/p9PDgxwJnHBjzhmd6z8+VXjadVVeLN9ahfbPnGm9uNpqVSiXdAmyPatyWLtjl
4l0JcJNgs6vTVRpfd2CFDtpNy0vLu+enqXfqx/DSgAIYzRZCz5q6Le74vhSFcwWDTnTwvM
t5IiKVOlOkmVuhRtQ0Yx/+DKAm1Gz6Yq+Rkqv4qEtHh0QCi8N48ZBvglXU677YfRLegKxk
Xopfl2hcIrGJ5ATJ/gNkEYxcE6HxdrNsaSrjVRHERhxMp/0h8lFFLyFstmdkuRvyS/FvaF
330AoYJrhDZXCaUIe7RddfkKYxFdbGGNpEeEHfqgDYuf18QUd+nqJlctlsCAelyipJkJWH
Pn8/k7OwLDYtcBhcXd82yRwsVPzsAP07CUC3Uwsr2ox+Ne+EafTuJ+qZdXV3zuQYQeqtUX
xuwnDsAdXldvX0dVE3uB75sabC2+NtYzGa5rBrTGQUwlSzd/Mk9blFW42zScJgwvEAmj9h
xL4lAU2x0Bb+dnZ4dikY+NkgWNmSPiy9JfOwR22EpJMPHY8Y0aKPij9k+F3pQrs1kSskFa
O0wu8EHjZKEQFPoZ8f8imseV9JEzmQJ4ZMNQNLSeFVCEnutpYAbNQAsCS9cDAwsKLkgDAv
8AAAdQd4ttp3eLbacAAAAHc3NoLXJzYQAAAgEAwDXoWYvplMLU7lw1tT9iK6iHVPAOcgYu
qRleq3Gy6EtAFYu7YYxjcNozJTYZ/p9PDgxwJnHBjzhmd6z8+VXjadVVeLN9ahfbPnGm9u
NpqVSiXdAmyPatyWLtjl4l0JcJNgs6vTVRpfd2CFDtpNy0vLu+enqXfqx/DSgAIYzRZCz5
q6Le74vhSFcwWDTnTwvMt5IiKVOlOkmVuhRtQ0Yx/+DKAm1Gz6Yq+Rkqv4qEtHh0QCi8N4
8ZBvglXU677YfRLegKxkXopfl2hcIrGJ5ATJ/gNkEYxcE6HxdrNsaSrjVRHERhxMp/0h8l
FFLyFstmdkuRvyS/FvaF330AoYJrhDZXCaUIe7RddfkKYxFdbGGNpEeEHfqgDYuf18QUd+
nqJlctlsCAelyipJkJWHPn8/k7OwLDYtcBhcXd82yRwsVPzsAP07CUC3Uwsr2ox+Ne+Eaf
TuJ+qZdXV3zuQYQeqtUXxuwnDsAdXldvX0dVE3uB75sabC2+NtYzGa5rBrTGQUwlSzd/Mk
9blFW42zScJgwvEAmj9hxL4lAU2x0Bb+dnZ4dikY+NkgWNmSPiy9JfOwR22EpJMPHY8Y0a
KPij9k+F3pQrs1kSskFaO0wu8EHjZKEQFPoZ8f8imseV9JEzmQJ4ZMNQNLSeFVCEnutpYA
bNQAsCS9cDAwsKLkgDAv8AAAADAQABAAACABF1lBp2NAx4OiFArPw+uqsejtRvTdCbsSdZ
D5lhJZAmLbcHT0kIGIxKtbSemnPfgq3TAWjskllxFRWv1/bKD3Mwlqf1HeJCMn8UkccBVz
qzXmBJJQzCI30UiGGTObodzg9jq70+F6GMveL5fuynw58VKrMzaYlvH8dRJ9nkUazYzQED
NV7rBNauXMzWWWB7wOe31XSNjYei4X/alSY0PRxyDcd0p6b7ABJKb/CgI3fFLUIasSYW0H
4qkjJMkZN878pMtpXWCdDxvQtfXMzKqyqKpzImbZqg96eVV/7MwMwkOa7oozzd7AhpHdQf
yK+7YB5EtQN40gbC89weHa2ODDf402rMNvbcYOfqKUDvFED5JejJ2ansmzFk9vgqUtcxW5
IaYpdVhOd5TEKWAxeLg3ET/4atou2CSeg/jSus3Yh+coLFqw2Ky14Dd9L8IdN35Com+W7H
swM9Hs36vQUifxEGoFgGlt10FzEy0fnwdsteaV+1q7n8TtaPBvx39q2b914YwZpM19ScvP
myDnfS4u3sU3XhA0LYAeVYLr+q1e7UigncfUqfRD8SFF+XpQKzHfdEcTnO2W+Jes9ctNf7
gPV1HlvgdSCp8cKHhzH01POENfc+X8GZnsS4dRzoa6Q+DM5EA40X7ufCsbPxGVXYQB/DMi
+XeEVWeu8DgBLOzwJhAAABAQDpSjFThrI/0qvr21XMzyy1cGMyok78WfMfpH5qnzo3oHCN
X00jyZhYhdNRZFF9V1xZNT74XJ3rzcucTKsYOAAvdGHoTE983ApMrc2vdxEnp6zkdlpUpf
e5H4UDSe8fA5lhL0wWIj+H9hrBh/qiQSf8BKMyYeDMnFYlGS5To+mACN7XrZCsT0tiM+HC
lhL5u96zce4RyjEg789RR24sLZj3B64N8lyUxwh6hi0B1Bmr1yVZPYhXHLxLuFlVM+u2uM
ngkqPwq18RnFEgunoFBEoz/60FqKz22U1htvkxIk2rei4n4gyYevu6DpdVXvCvsK3AT+fq
5iG8KMhSGGTplS7NAAABAQDurbYByoBpiqupP+7U2gW7a79ihwOkQbrJ7Qs++F4oWW2GY6
YhW7gj22X9bhluh2bNUV4vfjLDNM+t7lkPfTEOEtoPqPQJOjy2EuM197Fw90lUfHYMNZk5
sHExih7XBPF/284Kx9SKu4annDCV9MrNb0zfvoh7nO3vV68nQ2VA87r7ubbWInuXDpXKjQ
I9w9IJcfXOiFHd22DmrNYBPOjgQ9XcmypHYS4Wm5TRpuPKCSy/fo5MSJ5mYE36z9Ll49n+
YIniYzuZgEGn0vEdSMg9doungOSiSAfkk+IljvLHeAvkgAYfKeLdj2U5ZCKwdkrqQid6VV
/YRhP9D+XkJ1FPAAABAQDOKOQwN8ktrVJUNoSQO6s46JK5nyZd45dXKb220lPNZsYQBGTP
/D/pk8Y6sLlXCpre6UZDT7eofOqqxmVWtPT4AE+4R23UdyTuxXZBsKzBoh+Q7Ek+GtZ6NF
V6b+GA7V1nlLQT3OHAjo3DYk74NuDyVJkN3Sw9xSJKWATeqSH2Vs0BsZZA2ItZENBQP9ls
Ck5zx0kVmlYNTDIGG2/ncxfX7T0DchRj35JR9qHiqCypJAau6MwIGPtZGWSXkipd4U+d6j
6DNccLMm+DIq8Ges31/45ZXwaoDHh6jG0jh8Ynx34d2VwKSHpH1fBYm/5rdXf2fMjv+ioa
Vak9wDb6jOdRAAAAE2NoLWotc3NoLWV4YW1wbGUtMDUBAgMEBQYH
-----END OPENSSH PRIVATE KEY-----
Firma di test_1MB.bin
Firma SSH separata (SSHSIG, spazio dei nomi "file") di test_1MB.bin creata con questa chiave in CH-J Tools. Salvala come test_1MB.bin.sig accanto al file di test.
Scarica → 1 556 byte
-----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----
Revoca
Le chiavi SSH non hanno un certificato di revoca. Per revocare una chiave, rimuovila da authorized_keys oppure inseriscila in un elenco di revoca delle chiavi OpenSSH (KRL, creato con ssh-keygen -k) che il server legge tramite RevokedKeys.
Verifica la firma
Salva la chiave pubblica e la firma accanto a test_1MB.bin, crea un file allowed_signers ed esegui ssh-keygen:
echo "example@ch-j $(cat id_rsa.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I example@ch-j -n file -s test_1MB.bin.sig < test_1MB.bin