一、客户端建立两把钥匙
(1)本例以客户端的monkey用户为例,首先切换到~/.ssh目录下,如果没有该目录的话,需要进行新建
cd ~
mkdir .ssh
chmod 700 .ssh
cd ~/.ssh
(2)执行ssh-keygen命令生成客户端的公钥和私钥
ssh-keygen
[monkey@RHEL6 .ssh]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/monkey/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/monkey/.ssh/id_rsa.
Your public key has been saved in /home/monkey/.ssh/id_rsa.pub.
The key fingerprint is:
20:08:e7:d3:59:3a:13:ae:a2:7a:ce:6f:b2:59:ec:44 monkey@RHEL6.5
The key's randomart image is:
+--[ RSA 2048]----+
|. . . . |
| + + = |
| + O . |
| o + . |
|. . E S |
|.. o |
|. + |
|..o=. |
|.o==o |
+-----------------+
红色标记的为客户端的私钥,黄色标记的是服务端的公钥
-rw------- 1 monkey monkey 1675 7月 25 01:12 id_rsa
-rw-r--r-- 1 monkey monkey 396 7月 25 01:12 id_rsa.pub
二、将公钥文件上传到服务器上
例如,我们想登陆服务器192.168.1.100的iPanda用户,则需要将客户端的公钥上传到iPanda用户的家目录下
scp ~/.ssh/id_rsa.pub iPanda@192.168.1.100:/~
三、将公钥文件放置到服务器的正确目录与文件名
新建~/.ssh目录(如果没有的话), 并追加文件到 .ssh/authorized_keys中
mkdir .ssh
chmod 700 .ssh
将.id_rsa.pub中的数据追加到.ssh/authorized_keys文件中
cat id_rsa.pub >> .ssh/authorized_keys
chmod 644 .ssh/authorized_keys