Added back in OpenSSL as an additional option
This commit is contained in:
parent
05ab7b31ca
commit
f4f47a3777
|
@ -40,9 +40,10 @@ Entries available under `config.loginServers.ssh`:
|
|||
```
|
||||
|
||||
## Generate a SSH Private Key
|
||||
To utilize the SSH server, an SSH Private Key (PK) will need generated. OpenSSH can be used for this task:
|
||||
To utilize the SSH server, an SSH Private Key (PK) will need generated. OpenSSH or (with some versions) OpenSSL can be used for this task:
|
||||
|
||||
### OpenSSH
|
||||
|
||||
```bash
|
||||
ssh-keygen -m PEM -h -f config/ssh_private_key.pem
|
||||
```
|
||||
|
@ -58,6 +59,24 @@ Option descriptions:
|
|||
When you execute the `ssh-keygen` command it will ask for a passphrase (and a confirmation.) This should then be used as the value for `privateKeyPass` in the configuration.
|
||||
|
||||
|
||||
### OpenSSL
|
||||
|
||||
If you do not have OpenSSH installed or if you have trouble with the above OpenSSH commands, using some versions for OpenSSL (before version 3) the following commands may work as well:
|
||||
|
||||
|
||||
```bash
|
||||
openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:65537 | openssl rsa -out ./config/ssh_private_key.pem -aes128
|
||||
```
|
||||
|
||||
Or for even older OpenSSL versions:
|
||||
|
||||
```bash
|
||||
openssl genrsa -aes128 -out ./config/ssh_private_key.pem 2048
|
||||
```
|
||||
|
||||
Note that you may need `-3des` for every old implementations or SSH clients!
|
||||
|
||||
|
||||
## Prompt
|
||||
|
||||
The keyboard interactive prompt can be customized using a `SSHPMPT.ASC` art file. See [art](../../art/general.md) for more information on configuring. This prompt includes a `newUserNames` variable to show the list of allowed new user names (see `firstMenuNewUser` above.) See [mci](../../art/mci.md) for information about formatting this string. Note: Regardless of the content of the `SSHPMPT.ASC` file, the prompt is surrounded by "Access denied", a newline, the prompt, another newline, and then the string "\[username]'s password: ". This normally occurs after the first password prompt (no art is shown before the first password attempt is made.)
|
||||
|
|
Loading…
Reference in New Issue