openssh入门
ssh (secure shell),ssh協議支持登錄及文件的傳輸加密防止數據截留!
01、下載
https://www.ssh.com/ ###商業
https://www.openssl.org ###開源
http://www.openssh.com/ ###開源ssh
http://www.openssh.com/portable.html
http://www.ftp.ne.jp/OpenBSD/OpenSSH/portable/ ###日本
https://www.openssl.org/source/snapshot/
02、安裝
openssh
openssh-server
openssh-client
yum install -y openssh-server
03、測試
/etc/init.d/sshd start
service sshd start| restart | stop
配置文件
/etc/ssh/ssh_config
/etc/ssh/sshd_config
詳細配置文件說明:http://www.cnblogs.com/xiaochina/p/5802008.html
ssh-keygen -t rsa |dsa #生成公私秘鑰
id_rsa 私鑰 #私鑰很關鍵不要隨意傳播
id_rsa.pub 公鑰 --- authorized_keys
cat id_rsa.pub >>/root/.ssh/authorized_keys #公鑰位于target_server(登錄的目標機器)
ssh對登陸限制:http://www.cnblogs.com/xiaochina/p/5920057.html
04、ssh登錄
#ssh相關命令
ss sshd sssd
ssh ssh-keygen sss_ssh_authorizedkeys
ssh-add ssh-keyscan sss_ssh_knownhostsproxy
ssh-agent ssltap
ssh-copy-id sss_cache
[root@mvpbang ~]# ssh
usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
[-D [bind_address:]port] [-e escape_char] [-F configfile]
[-I pkcs11] [-i identity_file]
[-L [bind_address:]port:host:hostport]
[-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
[-R [bind_address:]port:host:hostport] [-S ctl_path]
[-W host:port] [-w local_tun[:remote_tun]]
[user@]hostname [command]
ssh root@172.24.0.24
ssh -l mvp 172.24.0.24
ssh 172.24.0.24 #讀取當前用戶名作為登錄用戶名
/root/.ssh/known_hosts #本機ssh遠程登錄Linux保存遠程機器的公鑰,用于安全傳輸數據
05、scp文件傳輸
[root@mvpbang ~]# scp
usage: scp [-1246BCpqrv] [-c cipher] [-F ssh_config] [-i identity_file]
[-l limit] [-o ssh_option] [-P port] [-S program]
[[user@]host1:]file1 ... [[user@]host2:]file2
scp xxx root@172.24.0.24:~ #上傳
scp root@172.24.0.24:/etc/passwd ~ #下載
06、sftp安全傳輸ftp
[root@mvpbang ~]# sftp
usage: sftp [-1Cv] [-B buffer_size] [-b batchfile] [-F ssh_config]
[-o ssh_option] [-P sftp_server_path] [-R num_requests]
[-S program] [-s subsystem | sftp_server] host
sftp [user@]host[:file ...]
sftp [user@]host[:dir[/]]
sftp -b batchfile [user@]host
sftp用法跟ftp基本沒啥差異
總結
- 上一篇: 从源码角度了解Vue生命周期
- 下一篇: 服务网关zuul之四:zuul网关配置