osx - How to use Mac OS X Keychain with SSH keys? - Super User
december 2011 by Aetles
As of the Leopard release of OS X, ssh-agent is more tightly integrated with Keychain. It is possible to store the passphrases of all of your SSH keys securely in Keychain, from which ssh-agent will read them on startup. The bottom line is that it is simple to secure your keys with passphrases, but never have to type the passphrase to use them! Here is how:
Add the pass phrase to each ssh key to keychain:
ssh-add -K [path/to/private SSH key]
Whenever you reboot your Mac, all the SSH keys in your keychain will be automatically loaded. You should be able to see the keys in the Keychain Access app, as well as from the command line via:
ssh-add -l
ssh
mac
osx
Add the pass phrase to each ssh key to keychain:
ssh-add -K [path/to/private SSH key]
Whenever you reboot your Mac, all the SSH keys in your keychain will be automatically loaded. You should be able to see the keys in the Keychain Access app, as well as from the command line via:
ssh-add -l
december 2011 by Aetles
Cain Manor | SSH Public and Private Key setup on OS-X
december 2011 by Aetles
I didn’t find one clear and concise place explaining how to setup private keys on OS-X. This is my attempt to remedy that.
First, you need to generate the Private (id_dsa or id_rsa) and Public (id_dsa.pub or id_rsa.pub) Key pair. Properly secured machines don’t accept RSA encryption (rsa1) which was used by SSH v1 protocol, but they do accept RSA v2 and DSA, with DSA being arguably more secure. For the –t option use either rsa or dsa, with dsa being preffered. The rest of this article assumes you’re using dsa. You are able to choose a passphrase, so pick something easy to remember and sufficiently complex.
ssh
mac
osx
First, you need to generate the Private (id_dsa or id_rsa) and Public (id_dsa.pub or id_rsa.pub) Key pair. Properly secured machines don’t accept RSA encryption (rsa1) which was used by SSH v1 protocol, but they do accept RSA v2 and DSA, with DSA being arguably more secure. For the –t option use either rsa or dsa, with dsa being preffered. The rest of this article assumes you’re using dsa. You are able to choose a passphrase, so pick something easy to remember and sufficiently complex.
december 2011 by Aetles
SSH Can Do That? Productivity Tips for Working with Remote Servers | Smylers [blogs.perl.org]
august 2011 by Aetles
SSH has many features which are helpful when working regularly with files on remote servers; together they can give a vast increase in productivity over the bare use of SSH. If you regularly use SSH, it’s worth spending a little time learning about these and configuring your environment to make your life easier.
ssh
linux
terminal
august 2011 by Aetles
Drupal upgrade easier | fuerstnet
may 2011 by Aetles
The standard procedure to upgrade Drupal to the latest release is to download it from drupal.org and follow the included UPGRADE.txt.
For administrators using the UNIX shell it may be easier using the attached patch files below instead of downloading and installing the newest complete Drupal release.
drupal
patch
security
ssh
For administrators using the UNIX shell it may be easier using the attached patch files below instead of downloading and installing the newest complete Drupal release.
may 2011 by Aetles
SSH and SCP: Howto, tips & tricks « Linux Tutorial Blog
march 2011 by Aetles
SCP
The scp command allows you to copy files over ssh connections. This is pretty useful if you want to transport files between computers, for example to backup something. The scp command uses the ssh command and they are very much alike. However, there are some important differences.
The scp command can be used in three* ways: to copy from a (remote) server to your computer, to copy from your computer to a (remote) server, and to copy from a (remote) server to another (remote) server. In the third case, the data is transferred directly between the servers; your own computer will only tell the servers what to do.
scp
terminal
ssh
The scp command allows you to copy files over ssh connections. This is pretty useful if you want to transport files between computers, for example to backup something. The scp command uses the ssh command and they are very much alike. However, there are some important differences.
The scp command can be used in three* ways: to copy from a (remote) server to your computer, to copy from your computer to a (remote) server, and to copy from a (remote) server to another (remote) server. In the third case, the data is transferred directly between the servers; your own computer will only tell the servers what to do.
march 2011 by Aetles
In LA » Blog Archive » iTunes sharing over the internet using Back to my Mac and ssh port forwarding
november 2010 by Aetles
I was at work the other week, doing a repetitive task of the sort that provides an opportunity to listen to music. I’d recently purchased an album and had stored it in the iTunes library on my home computer, but had not yet loaded the new songs onto my iPhone. There had to be a way to make iTunes at home share its music to my work computer so that I could listen to the new music. A few internet searches turned up some interesting information as well as a solution.
itunes
ssh
mac
november 2010 by Aetles
How do you untar multiple .tar.gz files? - Web Hosting Talk
october 2010 by Aetles
find will find files recursively in sub directories, if any. If that's what you want, great. If you only want files in the current directory, you can use:
for i in *.tar.gz; do tar xzvf $i; done
tar
commandline
terminal
ssh
for i in *.tar.gz; do tar xzvf $i; done
october 2010 by Aetles
10.5: How to use screen sharing remotely and securely - Mac OS X Hints
october 2010 by Aetles
If you are going to do this kind of thing often, you should edit the file ~/.ssh/config and put something like this in it
ssh
tunnel
october 2010 by Aetles
Tunneling afp over ssh
october 2010 by Aetles
You're at home, and you want to mount a disk from a Mac at work onto your Mac at home, but work has a firewall. Your attempts to use the afp file serving protocol are thwarted because the afp port (548) is blocked.
ssh
tunnel
afp
macosx
october 2010 by Aetles
Git over an ssh tunnel (like through a firewall or VPN) | RandyFay.com
october 2010 by Aetles
It's a treasured geek secret that ssh can tunnel TCP connections like ssh all over the internet. What does that mean? It means that you can access machines and ports from your local machine that you never thought you could, including git repositories that are behind firewalls or inside VPNs.
git
ssh
october 2010 by Aetles
10.5: Use public keys with SSH in 10.5 - Mac OS X Hints
may 2010 by Aetles
A few corrections.
You can't simply cat the public key over to a server if you haven't created the ~/.ssh directory first. You have to create the directory first. Also, simply catting it over isn't overly smart, and you could have it refuse to use the key due to insecure permissions. You should be doing:
scp ~/.ssh/id_rsa.pub user@server.com:~/
ssh user@server.com
mkdir .ssh && chown 0700 .ssh
mv id_rsa.pub .ssh/authorized_keys && chmod 0600 .ssh/authorized_keys
And you're right, the key needs to be on the other end first, before you get this dialog because this is add the key to the running ssh-agent. If there is no pubkey negotiation, ssh-agent isn't consulted at all, you're providing a straight password to the remote sshd server.
ssh
You can't simply cat the public key over to a server if you haven't created the ~/.ssh directory first. You have to create the directory first. Also, simply catting it over isn't overly smart, and you could have it refuse to use the key due to insecure permissions. You should be doing:
scp ~/.ssh/id_rsa.pub user@server.com:~/
ssh user@server.com
mkdir .ssh && chown 0700 .ssh
mv id_rsa.pub .ssh/authorized_keys && chmod 0600 .ssh/authorized_keys
And you're right, the key needs to be on the other end first, before you get this dialog because this is add the key to the running ssh-agent. If there is no pubkey negotiation, ssh-agent isn't consulted at all, you're providing a straight password to the remote sshd server.
may 2010 by Aetles
Copy this bookmark: