官术网_书友最值得收藏!

Configuring SSH RSA key authentication

This recipe describes how to configure pfSense to use an RSA key rather than a password for SSH authentication.

Getting ready

Make sure that SSH is already enabled and you have generated a public key for your client.

How to do it...

  1. Browse to System | Advanced | Secure Shell.
  2. Check Disable password login for Secure Shell (RSA key only).
  3. Edit the user we will associate with the client's public key from System | User Manager | Edit admin.
  4. Select Click to paste an authorized key and paste our client's public RSA key here. When pasted, the key should appear as a single line. Be sure your text editor didn't insert any line feed characters or authentication may fail.
  5. Save the changes.

How it works...

When we connect using an SSH client, we won't be asked for a password. Instead, the SSH server will use its copy of the public RSA key to send a challenge that can only be read if you posses the matching private key.

There's more...

RSA private keys can also be stored encrypted on the client machine. The SSH client will prompt for a decryption passphrase for the private key before being able to use it for authentication with the server.

See also

  • The Enabling the Secure Shell (SSH) recipe
  • The Generating authorized RSA keys recipe
  • The Accessing the Secure Shell (SSH) recipe
主站蜘蛛池模板: 上栗县| 赫章县| 县级市| 谢通门县| 额尔古纳市| 灌阳县| 洛隆县| 平罗县| 当涂县| 延庆县| 饶阳县| 金平| 义马市| 平利县| 南京市| 黔西县| 新竹县| 临沂市| 石屏县| 寻乌县| 炎陵县| 璧山县| 富顺县| 大兴区| 朔州市| 高平市| 朝阳县| 巩义市| 社旗县| 平顶山市| 沙坪坝区| 东安县| 梓潼县| 恩施市| 南靖县| 义乌市| 清水河县| 文山县| 定日县| 桂东县| 景德镇市|