CH-J ToolsSSH를 통한 서버 관리
메뉴
모든 SSH 키 예제 →

예제 04 · RSA 3072

RSA 키: 가장 폭넓게 지원되는 SSH 키 유형입니다. 서명에는 rsa-sha2-512를 사용하며, SHA-1을 사용하는 구형 ssh-rsa 서명은 현재 OpenSSH에서 비활성화되어 있습니다. 키가 클수록 느리지만 보안 여유는 더 큽니다.

키 개요

키 유형RSA 3072
SSH 알고리즘 이름ssh-rsa · signatures rsa-sha2-512
지원 범위폭넓게 지원됨. 현재 OpenSSH에는 RSA-SHA2 서명(rsa-sha2-256 또는 rsa-sha2-512)이 필요함. SHA-1 기반 ssh-rsa 서명은 OpenSSH 8.8부터 기본적으로 비활성화됨
개인 키 형식OpenSSH (openssh-key-v1), unencrypted
지문SHA256:HS3S7ghNmNJ8H0+gMwQBxkihRgCChGVIS8mYRsy0K7g

공개 키

authorized_keys 형식의 공개 키입니다. 아래 서명을 검증하려면 allowed_signers 파일에 추가하세요.

다운로드 → 572 바이트

ssh-rsa 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 ch-j-ssh-example-04

개인 키

암호화되지 않은 개인 키입니다. 테스트 전용으로 공개되었으며 누구나 사용할 수 있습니다.

다운로드 → 2 610 바이트

표시
-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----

test_1MB.bin의 서명

CH-J Tools에서 이 키로 생성한 test_1MB.bin의 분리형 SSH 서명입니다(SSHSIG, 네임스페이스 "file"). 테스트 파일과 같은 디렉터리에 test_1MB.bin.sig로 저장하세요.

다운로드 → 1 211 바이트

-----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----

폐기

SSH 키에는 폐기 인증서가 없습니다. 키를 폐기하려면 authorized_keys에서 제거하거나, 서버가 RevokedKeys 설정을 통해 읽는 OpenSSH 키 폐기 목록(KRL, ssh-keygen -k로 생성)에 등록하세요.

서명 검증

공개 키와 서명을 test_1MB.bin과 같은 디렉터리에 저장하고, allowed_signers 파일을 만든 뒤 ssh-keygen을 실행하세요:

echo "example@ch-j $(cat id_rsa.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I example@ch-j -n file -s test_1MB.bin.sig < test_1MB.bin