密钥概览
| 密钥类型 | DSA 1024 |
|---|---|
| SSH 算法名称 | ssh-dss |
| 支持情况 | OpenSSH 9.x 及更早版本（自 7.0 起默认禁用，10.0 中移除） |
| 私钥格式 | OpenSSH (openssh-key-v1), unencrypted |
| 指纹 | SHA256:M9O86Fg5WN5CtyPJXkcxQxMTP4Do2wbV6DDk9fWOQDc |
公钥
authorized_keys 格式的公钥。将其添加到 allowed_signers 文件中，即可验证下方的签名。
下载 → 608 字节
ssh-dss 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 ch-j-ssh-example-02私钥
未加密的私钥。仅为测试而公开，任何人都可以使用。
下载 → 1 393 字节
显示
-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----
test_1MB.bin 的签名
在 CH-J Tools 中使用此密钥生成的 test_1MB.bin 分离式 SSH 签名（SSHSIG，命名空间为 "file"）。请将其保存为 test_1MB.bin.sig，与测试文件放在同一目录中。
下载 → 777 字节
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAAbIAAAAHc3NoLWRzcwAAAIEAupysteHULBF8SJPYSlw3NvTvg7l9PV
pF9KT0mUZsI8XoLt6TDmSCmsrnj3ECk1ldrRbomweOM8UfThubjGCQWrzt1HLTv1cTsFqw
IChCMsS7pdFf0wew7pjVWxowD926xCDMGputmx1oJV3nSaUOtdQu1qbuG2tHspasz/tZCT
0AAAAVAPzhHEr7J4wvtdMBAGdSdcHZ08KXAAAAgCvDH6ZPZd8HWStQgosNQbDJKnxeE/g8
KVVJvTnzhk2Xl//0D9W/h0yr8LXztHfG+z4sRS1XWw9RalUc47w9D0sZaiJMHHtIySjqmc
aFjVSNngxi6xZ2nro+8xvejlF/135Lq/bb8TNdbnhr6plv3rpnVHklqkEWBgE4nJnyWLy3
AAAAgQCYlGATnFcRfSBhtcJWyc3/7INVNc5pTcl1r5kq0+ONduf634clEcvYFM+AfX9Sk5
hcyhAPlfwdqGpPg1K9XRizMyzT0hiS1FG67rWupvRW/OhVszeecVH57oyfpy0qx3jNwFiw
dzTJmSWSvXUCyVq0Gt5aIlNi/HVk3EfqmDZo9wAAAARmaWxlAAAAAAAAAAZzaGE1MTIAAA
A3AAAAB3NzaC1kc3MAAAAoP7PR8GekHakG4+QIJvLYoeWOBtsCMqleiuAk6D2ayqJsKUnZ
v/rG7Q==
-----END SSH SIGNATURE-----
吊销
SSH 密钥没有吊销证书。要撤销密钥，请将其从 authorized_keys 中移除，或将其列入 OpenSSH 密钥吊销列表（KRL，使用 ssh-keygen -k 创建），让服务器通过 RevokedKeys 配置读取该列表。
验证签名
将公钥和签名保存到 test_1MB.bin 所在的目录中，创建 allowed_signers 文件，然后运行 ssh-keygen：
echo "example@ch-j $(cat id_dsa.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I example@ch-j -n file -s test_1MB.bin.sig < test_1MB.bin