CH-J Tools透過 SSH 管理伺服器
選單
所有 SSH 金鑰範例 →

範例 05 · RSA 4096

RSA 金鑰:支援最廣泛的 SSH 金鑰類型。簽章使用 rsa-sha2-512;目前的 OpenSSH 已停用使用 SHA-1 的舊式 ssh-rsa 簽章。金鑰越大,速度越慢,但安全餘裕也越大。

金鑰概覽

金鑰類型RSA 4096
SSH 演算法名稱ssh-rsa · signatures rsa-sha2-512
支援情況廣泛支援;目前的 OpenSSH 要求使用 RSA-SHA2 簽章(rsa-sha2-256 或 rsa-sha2-512),因為使用 SHA-1 的 ssh-rsa 簽章自 OpenSSH 8.8 起已預設停用
私密金鑰格式OpenSSH (openssh-key-v1), unencrypted
指紋SHA256:r87pfWBR4SuuEEn1C+YC0c+mntL4rZT3QGXF/+mD6jg

公開金鑰

authorized_keys 格式的公開金鑰。將其加入 allowed_signers 檔案,即可驗證下方的簽章。

下載 → 744 位元組

ssh-rsa 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 ch-j-ssh-example-05

私密金鑰

未加密的私密金鑰。僅供測試而公開,任何人都能使用。

下載 → 3 389 位元組

顯示
-----BEGIN OPENSSH PRIVATE KEY-----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-----END OPENSSH PRIVATE KEY-----

test_1MB.bin 的簽章

在 CH-J Tools 中以此金鑰產生的 test_1MB.bin 分離式 SSH 簽章(SSHSIG,命名空間為 "file")。請將其儲存為 test_1MB.bin.sig,與測試檔案放在同一個目錄。

下載 → 1 556 位元組

-----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----

撤銷

SSH 金鑰沒有撤銷憑證。若要撤銷金鑰,請將其從 authorized_keys 移除,或列入 OpenSSH 金鑰撤銷清單(KRL,以 ssh-keygen -k 建立),讓伺服器透過 RevokedKeys 設定讀取該清單。

驗證簽章

將公開金鑰與簽章儲存到 test_1MB.bin 所在的目錄,建立 allowed_signers 檔案,然後執行 ssh-keygen:

echo "example@ch-j $(cat id_rsa.pub)" > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I example@ch-j -n file -s test_1MB.bin.sig < test_1MB.bin