{"id":52,"date":"2025-03-28T19:15:10","date_gmt":"2025-03-28T11:15:10","guid":{"rendered":"https:\/\/ziyuan.work\/?p=52"},"modified":"2025-11-12T14:59:27","modified_gmt":"2025-11-12T06:59:27","slug":"ssh%e5%8a%a0%e5%af%86%e6%a6%82%e5%bf%b5","status":"publish","type":"post","link":"https:\/\/ziyuan.work\/?p=52","title":{"rendered":"SSH\u52a0\u5bc6\u6982\u5ff5"},"content":{"rendered":"\n

SSH = Secure Shell
\u4e00\u79cd\u5b89\u5168\u52a0\u5bc6\u7f51\u7edc\u4f20\u8f93\u534f\u8bae<\/p>\n\n\n\n

\n\n\n\n

\u52a0\u5bc6\u57fa\u7840<\/mark><\/strong><\/p>\n\n\n\n

\n
\n
\n
\u5bf9\u79f0\u52a0\u5bc6<\/summary>\n

\u53d1\u9001\u65b9\u548c\u63a5\u6536\u65b9\u90fd\u4f7f\u7528\u540c\u4e00\u4e2a\u5bc6\u94a5<\/p>\n\n\n\n

\u53d1\u9001\u65b9\uff1a\u660e\u6587+\u5bc6\u94a5 -> \u5bc6\u6587<\/mark><\/em>
\u63a5\u6536\u65b9\uff1a\u5bc6\u6587<\/mark><\/em>+\u5bc6\u94a5 -> \u660e\u6587<\/p>\n\n\n\n

\u52a0\u5bc6\u7b97\u6cd5\uff1a
AES<\/strong>\uff08\u9ad8\u7ea7\u52a0\u5bc6\u6807\u51c6\uff0cAdvanced Encryption Standard\uff09\uff1a\u76ee\u524d\u6700\u5e38\u7528\u7684\u52a0\u5bc6\u7b97\u6cd5\uff08AES-128\u3001AES-192\u3001AES-256\uff09\uff0cSSH\u4f20\u8f93\u6570\u636e\u65f6\u4f1a\u4f7f\u7528AES\u52a0\u5bc6
DES<\/strong>\uff08\u6570\u636e\u52a0\u5bc6\u6807\u51c6\uff0cData Encryption Standard\uff09\uff1a\u65e9\u671f\u52a0\u5bc6\u6807\u51c6\uff0c\u5bc6\u94a5\u957f\u5ea6\u77ed\uff0856\u4f4d\uff09<\/p>\n<\/details>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\u975e\u5bf9\u79f0\u52a0\u5bc6<\/summary>\n

\u975e\u5bf9\u79f0\u52a0\u5bc6\u4f7f\u7528\u4e00\u5bf9\u5bc6\u94a5\uff1a\u516c\u94a5Public key\u548c\u79c1\u94a5Private Key
\u516c\u94a5\u7528\u4e8e\u52a0\u5bc6\uff0c\u79c1\u94a5\u7528\u4e8e\u89e3\u5bc6\uff0c\u516c\u94a5\u52a0\u5bc6\u7684\u6570\u636e\u53ea\u80fd\u7528\u79c1\u94a5\u89e3\u5bc6<\/p>\n\n\n\n

\u53d1\u9001\u65b9\uff1a\u4f7f\u7528\u63a5\u6536\u65b9\u7684\u516c\u94a5Pub\u8fdb\u884c\u52a0\u5bc6
\u63a5\u6536\u65b9\uff1a\u4f7f\u7528\u81ea\u5df1\u7684\u79c1\u94a5Private\u8fdb\u884c\u89e3\u5bc6<\/p>\n\n\n\n

\u52a0\u5bc6\u7b97\u6cd5\uff1a
RSA<\/strong>\uff08Rivest-Shamir-Adleman\uff09\uff1a\u57fa\u4e8e\u5927\u6574\u6570\u56e0\u5b50\u5206\u89e3\u96be\u9898\uff08\u5e38\u89c1\u5bc6\u94a5\u957f\u5ea6 2048\u30014096 \u4f4d\uff09
ECDSA<\/strong>\uff08\u692d\u5706\u66f2\u7ebf\u6570\u5b57\u7b7e\u540d\u7b97\u6cd5\uff09\uff1a\u57fa\u4e8e\u692d\u5706\u66f2\u7ebf\u79bb\u6563\u5bf9\u6570\u95ee\u9898\uff0c\u5bc6\u94a5\u77ed\u4f46\u540c\u7b49\u5b89\u5168
Ed25519<\/strong>\uff1a\u66f4\u5feb\u3001\u66f4\u5b89\u5168\u7684\u692d\u5706\u66f2\u7ebf\u7b7e\u540d\u7b97\u6cd5\uff0cSSH \u9ed8\u8ba4\u4f7f\u7528<\/p>\n<\/details>\n\n\n\n

\u54c8\u5e0c\u52a0\u5bc6<\/summary>\n

\u54c8\u5e0c\u662f\u4e00\u79cd\u5355\u5411\u51fd\u6570\uff0c\u7528\u4e8e\u8ba1\u7b97\u56fa\u5b9a\u957f\u5ea6\u7684\u660e\u6587\u503c\uff0c\u786e\u4fdd\u6570\u636e\u5b8c\u6574\u6027\u3002
\u54c8\u5e0c\u503c = hash(\u660e\u6587)<\/p>\n\n\n\n

    \n
  • \u4e0d\u53ef\u9006\uff08\u65e0\u6cd5\u4ece\u54c8\u5e0c\u503c\u8ba1\u7b97\u660e\u6587\uff09<\/li>\n\n\n\n
  • \u6297\u78b0\u649e\uff08\u96be\u4ee5\u627e\u5230\u4e00\u79cd hash(\u660e\u65871)=hash(\u660e\u65872)\uff09<\/li>\n\n\n\n
  • \u8f93\u5165\u654f\u611f\uff08\u54ea\u6015\u660e\u6587\u53ea\u6539\u52a81\u6bd4\u7279\uff0c\u54c8\u5e0c\u503c\u4e5f\u4f1a\u5927\u5e45\u53d8\u5316\uff09<\/li>\n<\/ul>\n\n\n\n

    \u52a0\u5bc6\u7b97\u6cd5\uff1a
    SHA-256<\/strong> <\/span><\/span><\/app-translate-loading><\/span><\/app-translate-content> \/ SHA-3<\/strong>\uff1a\u5e7f\u6cdb\u7528\u4e8e\u5b89\u5168\u534f\u8bae\uff0c\u5982 TLS\u3001SSH
    MD5<\/strong>\uff08\u6d88\u606f\u6458\u8981\u7b97\u6cd5\uff09\uff1a\u4e0d\u5b89\u5168\uff0c\u4e0d\u7528\u4e8e\u52a0\u5bc6\u4f20\u8f93\uff0c\u53ef\u7528\u4e8e\u9a8c\u8bc1\u4f20\u8f93\u4fe1\u606f\u5b8c\u6574\u6027<\/p>\n<\/details>\n<\/div>\n<\/div>\n\n\n\n

    \n\n\n\n

    SSH\u8ba4\u8bc1<\/mark><\/strong><\/p>\n\n\n\n

    \u56fa\u5b9a\u5bc6\u7801\ud83d\udcda\u6216\u5bc6\u94a5\u5bf9\ud83d\udd11\u767b\u9646SSH\u670d\u52a1\u5668\uff0c\u5f31\u5f3a\u5ea6\u7684\u56fa\u5b9a\u5bc6\u7801\u6709\u88ab\u66b4\u529b\u7834\u89e3\u7684\u53ef\u80fd\u3002<\/p>\n\n\n\n

      \n
    1. \u56fa\u5b9a\u5bc6\u7801\u767b\u9646\u65b9\u5f0f\uff1a\u5ba2\u6237\u7aef\u901a\u8fc7ssh\u547d\u4ee4\u5411ssh\u670d\u52a1\u5668\u53d1\u9001\u767b\u9646\u8bf7\u6c42\uff1b\u670d\u52a1\u5668\u5411\u5ba2\u6237\u7aef\u534f\u5546\u5bc6\u94a5\u7528\u4e8e\u6784\u5efa\u52a0\u5bc6\u901a\u4fe1\u901a\u9053\uff1b\u52a0\u5bc6\u901a\u9053\u5efa\u7acb\u540e\uff0c\u670d\u52a1\u5668\u5411\u5ba2\u6237\u7aef\u7d22\u8981\u767b\u9646\u5bc6\u7801\uff0c\u5e76\u4e0e\u670d\u52a1\u5668\u4e0a\u5b58\u50a8\u7684\u5bc6\u7801\u6bd4\u5bf9\uff1b\u5bc6\u7801\u6821\u9a8c\u901a\u8fc7\u540e\uff0c\u670d\u52a1\u5668\u5141\u8bb8\u5ba2\u6237\u7aef\u8bbf\u95eeShell\u3002<\/li>\n<\/ol>\n\n\n\n
      \"\"
      \u670d\u52a1\u5668\u534f\u5546\uff0c\u5bf9\u79f0\u5bc6\u94a5SHA-256<\/figcaption><\/figure>\n\n\n\n
        \n
      1. \u5bc6\u94a5\u5bf9\u7684\u767b\u9646\u65b9\u5f0f\u5305\u62ec\u516c\u94a5\u548c\u79c1\u94a5\u6982\u5ff5\uff0c\u516c\u94a5\u5373\u53ef\u4ee5\u516c\u5f00\u7684\u5bc6\u94a5\uff0c\u79c1\u94a5\u53ea\u6709\u5728\u672c\u5730\u5b58\u50a8\u624d\u5b89\u5168\u3002<\/li>\n<\/ol>\n\n\n\n
        \"\"
        \u5bc6\u94a5\u5bf9\u65b9\u5f0f\u767b\u9646<\/strong><\/figcaption><\/figure>\n\n\n\n
        \n\n\n\n

        \u5bc6\u94a5\u5b58\u50a8<\/mark><\/strong><\/p>\n\n\n\n

          \n
        1. \u672c\u673a\u516c\u94a5\u4fe1\u606f\u5b58\u50a8\u5728\u6587\u4ef6\uff1a~\/.ssh\/authorized_keys<\/code>
          \u516c\u94a5\u901a\u5e38\u7684\u5185\u5bb9\u662f\uff08\u52a0\u5bc6\u7c7b\u578b+\u516c\u94a5\u6587+\u57df\uff09\uff1a<\/li>\n<\/ol>\n\n\n\n
          ssh-ed25519 AAAAAAAAAAC1yc2EAAAADAQABAAACAQDRxHaAqjB5LcvNGMuB\/W9vL2sfbfvl8CKgkZUT9041MCtV9j== hi@ziyuan.work<\/code><\/pre>\n\n\n\n
            \n
          1.  ~\/.ssh\/<\/code> \u76ee\u5f55\u8fd8\u4f1a\u5b58\u653e\u670d\u52a1\u5668\u7684\u516c\u94a5\u548c\u79c1\u94a5\u6587\u4ef6\uff0c\u901a\u5e38\u662f.pem.pub<\/strong>\u548c.pem<\/strong>\u6587\u4ef6\uff0c\u6587\u4ef6\u683c\u5f0f\u4e3aPEM\uff08Privacy-Enhanced Mail\uff09<\/li>\n<\/ol>\n\n\n\n
            .pem\u79c1\u94a5\u6587\u4ef6\u5185\u5bb9\uff08\u79c1\u94a5\u6587\uff09\uff1a<\/p>\n\n\n\n
            -----BEGIN RSA PRIVATE KEY-----\nAB3NzaC1yc2EAAAADAQABAAABgQDlZICl9XYz0yovhi4ajYlyDfHL5tNt2jmX\/Js0I7c+Heqb3ExzOd+Td0aYVruMQkYsulXsQfe\/wzQ145OppbeFRkZATKIOkb\/DcN2YvTH+YtjO\/GJPtdT5WVA6I\/3a+pd2AgcXVh\n-----END OPENSSH PRIVATE KEY-----<\/code><\/pre>\n\n\n\n
            .pem.pub\u516c\u94a5\u6587\u4ef6\u5185\u5bb9\uff08\u52a0\u5bc6\u7c7b\u578b+\u516c\u94a5\u6587+\u57df\uff09\uff1a<\/p>\n\n\n\n
            ssh-rsa CCxrInV8Dgij2vuufsw4iLF\/05hg2L9rNHdwaQx6vSDZKgjw2VPzWxCufJeKMEZbKh9a4m7D1rMPN7Z1rS6E10\/vTFD2OJgbpi8eM1TondTlxVa8BZ0roXLuYCpue\/CyqOoYfm74fgmAbTKWUzg86jCVL9ngn66UQsW+AtgBX00d3XZ1oJ1lL9lvlyJwE6NXIMy3f9F5dJ0RZmqXtKLBeAR+SD+lD7sPug6O\/nYpEzK5BVDFGwFYtjO\/GJPtdT5 hi@ziyuan.work<\/code><\/pre>\n\n\n\n
              \n
            1. \u5bc6\u94a5\u751f\u6210<\/li>\n<\/ol>\n\n\n\n
              \u4f7f\u7528ssh-keygen\u547d\u4ee4\u53ef\u4ee5\u751f\u6210\u79c1\u94a5\u548c\u516c\u94a5<\/p>\n\n\n\n
              ssh-keygen -t rsa -b 4096 -m PEM -f mykey.pem\n\n# \u8fd0\u884c\u4ee5\u4e0a\u547d\u4ee4\u4f1a\u5728\u6587\u4ef6\u5939\u4e2d\u5f97\u5230mykey.pem<\/strong>\u548cmykey.pem.pub<\/strong>\u6587\u4ef6\uff0c\u79fb\u52a8\u6587\u4ef6\u5230~\/.ssh\u76ee\u5f55\n\n# -t \u52a0\u5bc6\u7b97\u6cd5\uff0c\u53ef\u4ee5\u6709rsa dsa ed25519 ecdsa\n# -b \u5bc6\u94a5\u4f4d\u6570\uff08bit\uff09\uff0c\u5f53-t \u4e3arsa\u548cecdsa\u65f6\u6709\u6548\n# -m \u5bc6\u94a5\u683c\u5f0f\uff0c\u53ef\u4ee5\u6709PEM OPENSSH PKCS8\n# -f \u6587\u4ef6\u540d\uff0c\u901a\u5e38\u4e3axxxxx.pem<\/code><\/pre>\n\n\n\n
                \n
              1. \u4f7f\u7528ssh-copy-id\u547d\u4ee4\u53ef\u4ee5\u5c06\u516c\u94a5\u53d1\u9001\u7ed9\u670d\u52a1\u5668\uff0c\u5b9e\u73b0\u5bc6\u94a5\u5bf9\u767b\u9646<\/li>\n<\/ol>\n\n\n\n
                ssh-copy-id user@192.168.1.10 \n\n# user\uff1a\u8fdc\u7a0b\u4e3b\u673a\u7528\u6237\n# 192.168.1.10\uff1a\u8fdc\u7a0b\u4e3b\u673aIP<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
                SSH = Secure Shell\u4e00\u79cd\u5b89\u5168\u52a0\u5bc6\u7f51\u7edc\u4f20\u8f93\u534f\u8bae \u52a0\u5bc6\u57fa\u7840 SSH\u8ba4\u8bc1 \u56fa\u5b9a\u5bc6\u7801\ud83d\udcda\u6216\u5bc6\u94a5\u5bf9\ud83d\udd11\u767b\u9646S […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-52","post","type-post","status-publish","format-standard","hentry","category-knowledge"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ziyuan.work\/index.php?rest_route=\/wp\/v2\/posts\/52","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ziyuan.work\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ziyuan.work\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ziyuan.work\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ziyuan.work\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=52"}],"version-history":[{"count":77,"href":"https:\/\/ziyuan.work\/index.php?rest_route=\/wp\/v2\/posts\/52\/revisions"}],"predecessor-version":[{"id":142,"href":"https:\/\/ziyuan.work\/index.php?rest_route=\/wp\/v2\/posts\/52\/revisions\/142"}],"wp:attachment":[{"href":"https:\/\/ziyuan.work\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=52"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ziyuan.work\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=52"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ziyuan.work\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=52"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}