# # AUTHOR , YEAR. # msgid "" msgstr "" "Project-Id-Version: 0\n" "POT-Creation-Date: 2014-05-22 13:28-0600\n" "PO-Revision-Date: 2014-05-22 13:28-0600\n" "Last-Translator: Automatically generated\n" "Language-Team: None\n" "MIME-Version: 1.0\n" "Content-Type: application/x-publican; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #. Tag: title #, no-c-format msgid "Creating SSH Keys" msgstr "" #. Tag: para #, no-c-format msgid "Secure Shell, or SSH, is a powerful and popular tool for connecting to Fedora systems over local or global networks. SSH is more secure when used with keys. Like a physical key and lock, an ssh public and private key are paired to work only with each other. Using keys can make connecting easier, and systems that use keys can be made more secure by turning off ssh password access." msgstr "" #. Tag: title #, no-c-format msgid "Required Ingredients" msgstr "" #. Tag: para #, no-c-format msgid "openssh-clients - Package, comes by default on most systems." msgstr "" #. Tag: para #, no-c-format msgid "openssh - Package, comes by default on most systems." msgstr "" #. Tag: para #, no-c-format msgid "Working Network Connection - Network services need a network!" msgstr "" #. Tag: para #, no-c-format msgid "Target host - Another computer that you have network and password access to. You will need either an IP address or a domain name for this machine." msgstr "" #. Tag: title #, no-c-format msgid "Local testing" msgstr "" #. Tag: para #, no-c-format msgid "To test ssh access against the local machine instead of another on the network, use localhost as the target hostname." msgstr "" #. Tag: title #, no-c-format msgid "Directions" msgstr "" #. Tag: title #, no-c-format msgid "Setting up SSH Keys" msgstr "" #. Tag: para #, no-c-format msgid "Create the key." msgstr "" #. Tag: screen #, no-c-format msgid "\n" " ssh-keygen -b 4096 -N \"secret\" -f ~/.ssh/target_id_isa\n" " " msgstr "" #. Tag: para #, no-c-format msgid "If you don't declare any options, ssh-keygen will ask for the required minimum interactively. Read about the example's options below, or find more options in man ssh-keygen." msgstr "" #. Tag: member #, no-c-format msgid "-b 4096 : Generates a 4096-bit key, stronger than the default." msgstr "" #. Tag: member #, no-c-format msgid "-n secret : A passphrase for the key. Optional, but strongly recommended." msgstr "" #. Tag: member #, no-c-format msgid "-f ~/.ssh/target_id_rsa : The file to create. Call the file anything, but store it in ~/.ssh/" msgstr "" #. Tag: para #, no-c-format msgid "Copy the public key to your target." msgstr "" #. Tag: screen #, no-c-format msgid "\n" " \n" " ssh-copy-id -i ~/.ssh/target_id_rsa.pub target_ip\n" " \n" " " msgstr "" #. Tag: para #, no-c-format msgid "The ssh-copy-id utility opens an ssh connection to the target using password authentication and adds the contents of the public key to ~/.ssh/authorized_keys`. The file can also be shared by other means and appended to authorized_keys manually, a method used for systems where password authentication cannot be turned on." msgstr "" #. Tag: screen #, no-c-format msgid "\n" " cat target_id_rsa.pub >> ~/.ssh/authorized_keys\n" " " msgstr "" #. Tag: para #, no-c-format msgid "Test the key:" msgstr "" #. Tag: screen #, no-c-format msgid "\n" " \n" " ssh -i ~/.ssh/target_id_rsa -o PasswordAuthentication=no target_ip\n" " \n" " " msgstr "" #. Tag: para #, no-c-format msgid "Add an entry in your client ssh configuration for the key. ssh will try all keys in ~/.ssh/ when connecting to any host unless configured otherwise, so configuring it to only use keys that are explicitly paired to a host will reduce rejected authentication attempts and speed connections." msgstr "" #. Tag: title #, no-c-format msgid "Editing ~/.ssh/config" msgstr "" #. Tag: screen #, no-c-format msgid "\n" " Host *\n" " IdentitiesOnly yes\n" "\n" " Host target_ip\n" " PasswordAuthentication No\n" " IdentityFile ~/.ssh/target_id_rsa\n" " " msgstr "" #. Tag: title #, no-c-format msgid "References" msgstr "" #. Tag: para #, no-c-format msgid "ssh-keygen(1) - manual for ssh-keygen" msgstr "" #. Tag: para #, no-c-format msgid "ssh-copy-id(1) - manual for ssh-copy-id" msgstr "" #. Tag: para #, no-c-format msgid "ssh-config(5) - manual for ssh client configuration files" msgstr ""