CH-J Tools透過 SSH 管理伺服器
選單
所有 SSH 金鑰範例 →

範例 02 · DSA 1024 (舊式)

DSA 金鑰(ssh-dss),模數長度為 1024 位元,使用 SHA-1 簽章。OpenSSH 在 7.0(2015)預設停用,並在 10.0(2025)移除;僅供測試舊系統。

金鑰概覽

金鑰類型DSA 1024
SSH 演算法名稱ssh-dss
支援情況OpenSSH 9.x 及更舊版本(自 7.0 起預設停用,於 10.0 移除)
私密金鑰格式OpenSSH (openssh-key-v1), unencrypted
指紋SHA256:M9O86Fg5WN5CtyPJXkcxQxMTP4Do2wbV6DDk9fWOQDc

公開金鑰

authorized_keys 格式的公開金鑰。將其加入 allowed_signers 檔案,即可驗證下方的簽章。

下載 → 608 位元組

ssh-dss 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 ch-j-ssh-example-02

私密金鑰

未加密的私密金鑰。僅供測試而公開,任何人都能使用。

下載 → 1 393 位元組

顯示
-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----

test_1MB.bin 的簽章

在 CH-J Tools 中以此金鑰產生的 test_1MB.bin 分離式 SSH 簽章(SSHSIG,命名空間為 "file")。請將其儲存為 test_1MB.bin.sig,與測試檔案放在同一個目錄。

下載 → 777 位元組

-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAAbIAAAAHc3NoLWRzcwAAAIEAupysteHULBF8SJPYSlw3NvTvg7l9PV
pF9KT0mUZsI8XoLt6TDmSCmsrnj3ECk1ldrRbomweOM8UfThubjGCQWrzt1HLTv1cTsFqw
IChCMsS7pdFf0wew7pjVWxowD926xCDMGputmx1oJV3nSaUOtdQu1qbuG2tHspasz/tZCT
0AAAAVAPzhHEr7J4wvtdMBAGdSdcHZ08KXAAAAgCvDH6ZPZd8HWStQgosNQbDJKnxeE/g8
KVVJvTnzhk2Xl//0D9W/h0yr8LXztHfG+z4sRS1XWw9RalUc47w9D0sZaiJMHHtIySjqmc
aFjVSNngxi6xZ2nro+8xvejlF/135Lq/bb8TNdbnhr6plv3rpnVHklqkEWBgE4nJnyWLy3
AAAAgQCYlGATnFcRfSBhtcJWyc3/7INVNc5pTcl1r5kq0+ONduf634clEcvYFM+AfX9Sk5
hcyhAPlfwdqGpPg1K9XRizMyzT0hiS1FG67rWupvRW/OhVszeecVH57oyfpy0qx3jNwFiw
dzTJmSWSvXUCyVq0Gt5aIlNi/HVk3EfqmDZo9wAAAARmaWxlAAAAAAAAAAZzaGE1MTIAAA
A3AAAAB3NzaC1kc3MAAAAoP7PR8GekHakG4+QIJvLYoeWOBtsCMqleiuAk6D2ayqJsKUnZ
v/rG7Q==
-----END SSH SIGNATURE-----

撤銷

SSH 金鑰沒有撤銷憑證。若要撤銷金鑰,請將其從 authorized_keys 移除,或列入 OpenSSH 金鑰撤銷清單(KRL,以 ssh-keygen -k 建立),讓伺服器透過 RevokedKeys 設定讀取該清單。

驗證簽章

將公開金鑰與簽章儲存到 test_1MB.bin 所在的目錄,建立 allowed_signers 檔案,然後執行 ssh-keygen:

echo "example@ch-j $(cat id_dsa.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I example@ch-j -n file -s test_1MB.bin.sig < test_1MB.bin