主页 / server / 问题 / 394555
Accepted
imaginative
Asked: 2012-06-01 14:54:51 +0800 CST

将私钥添加到 ssh 链

  • 772

我有多个用于连接各种盒子的私钥。这主要是针对 AWS，它让我导入一个密钥以便连接到机器——我为此创建了一个单独的密钥集。而不是不断地做：

ssh -i ~/.ssh/aws-key.pem [email protected]

添加aws-key.pem到我的“ssh keychain”的最佳方法是什么，以便它默认检查所有 SSH 请求以及现有的“id_dsa”密钥？

linux ssh

2 个回答

  1. Best Answer

    你有几个选择。

    使用SSH 代理。只需对所有私钥使用 ssh-add，然后让您的代理确定要使用的密钥。我通常更喜欢使用代理，并且总是在我登录到我的系统时启动它，并添加我所有的密钥。它让一切变得简单。

    更改您的 ssh 配置

    # .ssh/config

# per host example
Host blah.example.com
    User zoredache
    IdentityFile ~/.ssh/username_YYYYMMDD_id_rsa

# global example
Host *
    User zoredache
    IdentityFile ~/.ssh/key1_YYYYMMDD_id_rsa
    IdentityFile ~/.ssh/key2_YYYYMMDD_id_rsa
    IdentityFile ~/.ssh/keyn_YYYYMMDD_id_rsa
    • 8

  2. 使用IdentityFile于~/.ssh/config

    如果您只想为特定主机使用它，请将其包含在Host指令下。

         IdentityFile
         Specifies a file from which the user's DSA, ECDSA or DSA authentication identity is read.  The default is ~/.ssh/identity for protocol version 1, and ~/.ssh/id_dsa,
         ~/.ssh/id_ecdsa and ~/.ssh/id_rsa for protocol version 2.  Additionally, any identities represented by the authentication agent will be used for authentication.  ssh(1) will
         try to load certificate information from the filename obtained by appending -cert.pub to the path of a specified IdentityFile.

         The file name may use the tilde syntax to refer to a user's home directory or one of the following escape characters: ‘%d’ (local user's home directory), ‘%u’ (local user
         name), ‘%l’ (local host name), ‘%h’ (remote host name) or ‘%r’ (remote user name).

         It is possible to have multiple identity files specified in configuration files; all these identities will be tried in sequence.  Multiple IdentityFile directives will add
         to the list of identities tried (this behaviour differs from that of other configuration directives).
    • 5

相关问题