1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
|
#
# AUTHOR <EMAIL@ADDRESS>, YEAR.
#
msgid ""
msgstr ""
"Project-Id-Version: 0\n"
"POT-Creation-Date: 2014-05-22 13:28-0600\n"
"PO-Revision-Date: 2014-05-22 13:28-0600\n"
"Last-Translator: Automatically generated\n"
"Language-Team: None\n"
"MIME-Version: 1.0\n"
"Content-Type: application/x-publican; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#. Tag: title
#, no-c-format
msgid "Creating SSH Keys"
msgstr ""
#. Tag: para
#, no-c-format
msgid "Secure Shell, or SSH, is a powerful and popular tool for connecting to Fedora systems over local or global networks. SSH is more secure when used with <literal>keys</literal>. Like a physical key and lock, an ssh public and private key are paired to work only with each other. Using keys can make connecting easier, and systems that use keys can be made more secure by turning off ssh password access."
msgstr ""
#. Tag: title
#, no-c-format
msgid "Required Ingredients"
msgstr ""
#. Tag: para
#, no-c-format
msgid "<package>openssh-clients</package> - Package, comes by default on most systems."
msgstr ""
#. Tag: para
#, no-c-format
msgid "<package>openssh</package> - Package, comes by default on most systems."
msgstr ""
#. Tag: para
#, no-c-format
msgid "<emphasis>Working Network Connection</emphasis> - Network services need a network!"
msgstr ""
#. Tag: para
#, no-c-format
msgid "<emphasis>Target host</emphasis> - Another computer that you have network and password access to. You will need either an IP address or a domain name for this machine."
msgstr ""
#. Tag: title
#, no-c-format
msgid "Local testing"
msgstr ""
#. Tag: para
#, no-c-format
msgid "To test ssh access against the local machine instead of another on the network, use <systemitem class=\"domainname\">localhost</systemitem> as the target hostname."
msgstr ""
#. Tag: title
#, no-c-format
msgid "Directions"
msgstr ""
#. Tag: title
#, no-c-format
msgid "Setting up SSH Keys"
msgstr ""
#. Tag: para
#, no-c-format
msgid "Create the key."
msgstr ""
#. Tag: screen
#, no-c-format
msgid "\n"
" <command>ssh-keygen -b 4096 -N \"<replaceable>secret</replaceable>\" -f <filename class=\"directory\">~/.ssh/<replaceable>target_id_isa</replaceable></filename></command>\n"
" "
msgstr ""
#. Tag: para
#, no-c-format
msgid "If you don't declare any options, <application>ssh-keygen</application> will ask for the required minimum interactively. Read about the example's options below, or find more options in <command>man ssh-keygen</command>."
msgstr ""
#. Tag: member
#, no-c-format
msgid "<parameter>-b 4096</parameter> : Generates a 4096-bit key, stronger than the default."
msgstr ""
#. Tag: member
#, no-c-format
msgid "<parameter>-n <replaceable>secret</replaceable></parameter> : A passphrase for the key. Optional, but strongly recommended."
msgstr ""
#. Tag: member
#, no-c-format
msgid "<parameter>-f <filename class=\"directory\">~/.ssh/<replaceable>target_id_rsa</replaceable></filename></parameter> : The file to create. Call the file anything, but store it in <filename class=\"directory\">~/.ssh/</filename>"
msgstr ""
#. Tag: para
#, no-c-format
msgid "Copy the public key to your target."
msgstr ""
#. Tag: screen
#, no-c-format
msgid "\n"
" <command>\n"
" ssh-copy-id -i ~/.ssh/<replaceable>target_id_rsa</replaceable>.pub <replaceable>target_ip</replaceable>\n"
" </command>\n"
" "
msgstr ""
#. Tag: para
#, no-c-format
msgid "The <application>ssh-copy-id</application> utility opens an ssh connection to the target using password authentication and adds the contents of the public key to <filename>~/.ssh/authorized_keys</filename>`. The file can also be shared by other means and appended to <filename>authorized_keys</filename> manually, a method used for systems where password authentication cannot be turned on."
msgstr ""
#. Tag: screen
#, no-c-format
msgid "\n"
" <command>cat target_id_rsa.pub >> ~/.ssh/authorized_keys</command>\n"
" "
msgstr ""
#. Tag: para
#, no-c-format
msgid "Test the key:"
msgstr ""
#. Tag: screen
#, no-c-format
msgid "\n"
" <command>\n"
" ssh -i ~/.ssh/target_id_rsa -o PasswordAuthentication=no <replaceable>target_ip</replaceable>\n"
" </command>\n"
" "
msgstr ""
#. Tag: para
#, no-c-format
msgid "Add an entry in your client ssh configuration for the key. <application>ssh</application> will try all keys in <filename>~/.ssh/</filename> when connecting to any host unless configured otherwise, so configuring it to only use keys that are explicitly paired to a host will reduce rejected authentication attempts and speed connections."
msgstr ""
#. Tag: title
#, no-c-format
msgid "Editing <filename>~/.ssh/config</filename>"
msgstr ""
#. Tag: screen
#, no-c-format
msgid "\n"
" Host *\n"
" IdentitiesOnly yes\n"
"\n"
" Host <replaceable>target_ip</replaceable>\n"
" PasswordAuthentication No\n"
" IdentityFile ~/.ssh/<replaceable>target_id_rsa</replaceable>\n"
" "
msgstr ""
#. Tag: title
#, no-c-format
msgid "References"
msgstr ""
#. Tag: para
#, no-c-format
msgid "<citetitle>ssh-keygen(1)</citetitle> - manual for ssh-keygen"
msgstr ""
#. Tag: para
#, no-c-format
msgid "<citetitle>ssh-copy-id(1)</citetitle> - manual for ssh-copy-id"
msgstr ""
#. Tag: para
#, no-c-format
msgid "<citetitle>ssh-config(5)</citetitle> - manual for ssh client configuration files"
msgstr ""
|
