<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Ssh on kenops</title><link>https://www.kenops.io/tags/ssh/</link><description>Recent content in Ssh on kenops</description><generator>Hugo</generator><language>en</language><lastBuildDate>Wed, 17 Jun 2020 23:54:55 +0000</lastBuildDate><atom:link href="https://www.kenops.io/tags/ssh/index.xml" rel="self" type="application/rss+xml"/><item><title>Password-less ssh in 2 Glorious Steps...</title><link>https://www.kenops.io/posts/password-less-ssh-in-2-glorious-steps/</link><pubDate>Wed, 17 Jun 2020 23:54:55 +0000</pubDate><guid>https://www.kenops.io/posts/password-less-ssh-in-2-glorious-steps/</guid><description>&lt;p&gt;&lt;img loading="lazy" src="https://www.ionos.com/digitalguide/fileadmin/DigitalGuide/Teaser/public-key-authentifizierung-t.jpg"&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Local System - Let&amp;rsquo;s call it alpha&lt;/strong&gt;&lt;br&gt;
&lt;strong&gt;Remote System we don&amp;rsquo;t want to have to enter passwords for,&lt;/strong&gt;&lt;br&gt;
&lt;strong&gt;Let&amp;rsquo;s call it foxtrot&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Prep:&lt;/strong&gt; Harden your existing ssh keys since RSA 1024 sucks. This will create a new 4096 version - ed22519 is actually preferred so you can skip the rsa creation if preferred.&lt;/p&gt;
&lt;pre tabindex="0"&gt;&lt;code&gt;me@alpha$ mv ~/.ssh/id_rsa ~/.ssh/id_rsa_legacy
me@alpha$ mv ~/.ssh/id_rsa.pub ~/.ssh/id_rsa_legacy.pub
&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;&lt;strong&gt;Step 1:&lt;/strong&gt; Generate new keys:&lt;/p&gt;
&lt;pre tabindex="0"&gt;&lt;code&gt;me@alpha$ ssh-keygen -t rsa -b 4096 -o -a 100 #RSA version
me@alpha$ ssh-keygen -o -a 100 -t ed25519 #Preferred ed25519 version
&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;&lt;strong&gt;Step 2:&lt;/strong&gt; Copy the Ed25519  keys to the remote system called foxtrot:&lt;/p&gt;</description></item></channel></rss>