如何使用ssh-hop從windows轉發金鑰

kaneda99提供的影象。...

Do you have the need to work with SSH keys from Windows and you find that this becomes a hassle very quickly? HTG goes into how to make the process as transparent as possible, using The PuTTY package suite.

kaneda99提供的影象。

概述

在本指南中，我們將解釋如何使用Putty&Winscp使用公鑰從Windows SSH到Linux機器。此外，我們將啟用轉發選項。這將允許您繼續從用金鑰連線的機器跳轉到另一臺支援用金鑰進行SSHing的機器。我們將不討論如何在Linux機器上放置公鑰，因為我們已經討論了這個主題。

安裝基本程式/軟體包

獲取PuTTY包（不僅僅是可執行檔案）並安裝它。
（可選）獲取程式WinSCP和mRemote，並安裝它們。

Generate a Key pair

If you haven’t created a key pair yet, and you want to do it from the comfort of your Windows desktop, you can use “PuTTY Key Generator” which was installed as part of the “PuTTY package“:

Open “PuTTY Key Generator” by going into “Start” -> “PuTTY” -> “PuTTYgen”
While not required, it is recommended that you change the length of your key from the default 1024. Change the number of “bits” at the bottom from “1024” to “4096”.
Click “Generate” and move your mouse around randomly until the bar reaches 100%. This “salts” your key, so try to make your mouse movements as random as possible.
Once the program is done generating the key,
On the “Key Comment” line, change it to be something more useful like your name. For example:
While not required, it is highly recommended that you set a passphrase on the private key. This will protect your private key in case some one gains access to it and you will only be bothered with entering once at machine boot up, if you perform all the steps in the guide.
Click on “Save private key”.

Note: If you already have a saved private key, you can “extract” the public portion by “load”ing it with the generator.

Configuring the Key-quartermaster

The “Pageant” program that was installed as part of the PuTTY package, can store your key/s and give them to mRemote, WinSCP and PuTTY as required.

Open “Pageant” from the start menu. (Note: it may run off to the system tray)
If it has run off to the system tray, double click it, to bring up the main window.
Click “Add Key” and give it your saved Key Pair.
If need be, provide the passphrase.

Done, from now on, Putty, WinSCP and any program that serves as a fronted for them (like mRemote) will first c***ult with the Pageant program if there is a key to use for the connection.

Loading Keys automatically at startup (Optional)

The process above needs to be repeated after every machine reboot, as Pageant doesn’t save loaded key configurati***. To have it load the configuration automatically at startup, you can use one of the two methods below:

Assuming you’ve allowed Pageant to take over the ppk suffix, you should be able to simply add the key files to the Windows “startup” folder.
Create a shortcut to the program that passes the key-files as parameters. For example, the “Target” command for two(2) keys would look like: “C:\Program Files (x86)\PuTTY\pageant.exe” “C:\Users\AviadR\Documents\aviad’s 4096.ppk” “C:\Users\AviadR\Documents\aviad’s 1024.ppk

Then, add this shortcut to window’s startup.

Enable SSH Agent forwarding (PuTTY/mRemote)

此配置是可選的，但這樣做將允許您在SSH到一臺計算機後繼續，並使用相同的金鑰從它SSH到下一臺計算機。為此：

開啟油灰。
在“Connection”->“SSH”->“Auth”下。
選中“允許代理轉發”。
返回“會話”
選擇“預設設定”項。
點選“儲存”。
完成。

啟用SSH代理轉發（WinSCP）

In a WinSCP new connection tab, Enable the Advance opti*** checkbox.
Go to the “SSH” -> “Authentication”.
Check the “Allow agent forwarding” checkbox.
Go to the “General Opti***” by clicking on “Preferences” -> “Preferences”.
Enable Putty to be invoked with the forwarding option by going into “Integration” -> “Application” and appending the “-A” CLI option.
You can now make this the template for subsequent connecti*** by going back to “Session” and typing in, the basic information that you know will be uniform across all connecti*** (if any), like Username, IP, Etc’. Then “save” the session.

Author’s Notes

While purists, will say that any serious SSHing, should be done from a Linux machine, the reality is that Ubuntu’s bug #1 “Microsoft has a majority desktop market share”, still holds true. maybe one day we’ll move to the Linux desktop completely, but that day will not be today and not for the 35 year old shell.

斯派克：所以我想我服刑了，我可以走了？聲波：自由行動，塞伯坦…