Unterschiede
Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
| Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
| centos:ssh-install [12.11.2016 19:24. ] – [openssh-askpass] django | centos:ssh-install [12.10.2024 12:46. ] (aktuell) – Deppenapostroph entfernt django | ||
|---|---|---|---|
| Zeile 1: | Zeile 1: | ||
| ====== Secure Shell - ssh ====== | ====== Secure Shell - ssh ====== | ||
| {{: | {{: | ||
| - | |||
| - | ===== Dokumentation ===== | ||
| - | Wichtige Hinweise zur Absicherung von **ssh** finden sich im [[https:// | ||
| ===== openSSH - Programmsuite ===== | ===== openSSH - Programmsuite ===== | ||
| Die für die **// | Die für die **// | ||
| - | * openssh : Die OpenSSH-Implementierung der SSH Protokoll-Versionen | + | * openssh.i386 : Die OpenSSH-Implementierung der SSH Protokoll-Versionen 1 und 2 |
| - | * openssh-clients : Die OpenSSH-Client-Anwendungen | + | * openssh-clients.i386 : Die OpenSSH-Client-Anwendungen |
| - | * openssh-server : Der OpenSSH-Server Daemon | + | * openssh-server.i386 : Der OpenSSH-Server Daemon |
| - | * openssh-askpass : Passphrase-Dialog für OpenSSH und X | + | * openssh-askpass.i386 : Passphrase-Dialog für OpenSSH und X |
| ==== openssh ==== | ==== openssh ==== | ||
| - | Mittels | + | Mittels |
| + | < | ||
| + | Name : openssh | ||
| + | Version | ||
| + | ... | ||
| - | # rpm -qil openssh | + | ... |
| - | < | + | Signature |
| - | Version | + | Packager |
| - | Release | + | |
| - | Architecture: | + | |
| - | Install Date: Wed 23 Mar 2016 07:14:52 PM CET | + | |
| - | Group : Applications/ | + | |
| - | Size : 1450050 | + | |
| - | License | + | |
| - | Signature | + | |
| - | Source RPM : openssh-6.6.1p1-25.el7_2.src.rpm | + | |
| - | Build Date : Mon 21 Mar 2016 11:18:48 PM CET | + | |
| - | Build Host : worker1.bsys.centos.org | + | |
| - | Relocations : (not relocatable) | + | |
| - | Packager | + | |
| - | Vendor | + | |
| URL : http:// | URL : http:// | ||
| - | Summary | + | Summary |
| Description : | Description : | ||
| SSH (Secure SHell) is a program for logging into and executing | SSH (Secure SHell) is a program for logging into and executing | ||
| Zeile 40: | Zeile 28: | ||
| OpenSSH is OpenBSD' | OpenSSH is OpenBSD' | ||
| - | it up to date in terms of security and features. | + | it up to date in terms of security and features, as well as removing |
| + | all patented algorithms to separate libraries. | ||
| This package includes the core files necessary for both the OpenSSH | This package includes the core files necessary for both the OpenSSH | ||
| Zeile 49: | Zeile 38: | ||
| / | / | ||
| / | / | ||
| - | / | ||
| / | / | ||
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | / |
| - | / | + | /usr/share/doc/openssh-4.3p2/WARNING.RNG |
| - | / | + | |
| - | / | + | |
| - | /usr/share/licenses/openssh-6.6.1p1 | + | |
| - | /usr/ | + | |
| / | / | ||
| / | / | ||
| - | |||
| - | |||
| ==== openssh-clients ==== | ==== openssh-clients ==== | ||
| Beim Paket **openssh-clients** wird mitgeliefert: | Beim Paket **openssh-clients** wird mitgeliefert: | ||
| + | < | ||
| + | Name : openssh-clients | ||
| + | Version | ||
| + | ... | ||
| - | # rpm -qil openssh-clients | + | ... |
| - | < | + | Signature |
| - | Version | + | Packager |
| - | Release | + | |
| - | Architecture: | + | |
| - | Install Date: Wed 23 Mar 2016 07:14:59 PM CET | + | |
| - | Group : Applications/ | + | |
| - | Size : 2298871 | + | |
| - | License | + | |
| - | Signature | + | |
| - | Source RPM : openssh-6.6.1p1-25.el7_2.src.rpm | + | |
| - | Build Date : Mon 21 Mar 2016 11:18:48 PM CET | + | |
| - | Build Host : worker1.bsys.centos.org | + | |
| - | Relocations : (not relocatable) | + | |
| - | Packager | + | |
| - | Vendor | + | |
| URL : http:// | URL : http:// | ||
| - | Summary | + | Summary |
| Description : | Description : | ||
| OpenSSH is a free version of SSH (Secure SHell), a program for logging | OpenSSH is a free version of SSH (Secure SHell), a program for logging | ||
| into and executing commands on a remote machine. This package includes | into and executing commands on a remote machine. This package includes | ||
| the clients necessary to make encrypted connections to SSH servers. | the clients necessary to make encrypted connections to SSH servers. | ||
| + | You'll also need to install the openssh package on OpenSSH clients. | ||
| / | / | ||
| / | / | ||
| Zeile 109: | Zeile 83: | ||
| / | / | ||
| / | / | ||
| - | / | ||
| - | / | ||
| / | / | ||
| / | / | ||
| Zeile 119: | Zeile 91: | ||
| / | / | ||
| / | / | ||
| - | / | + | / |
| - | / | + | |
| ==== openssh-server ==== | ==== openssh-server ==== | ||
| Hingegen liefert uns **openssh-server** folgende Dateien: | Hingegen liefert uns **openssh-server** folgende Dateien: | ||
| + | < | ||
| + | Name : openssh-server | ||
| + | Version | ||
| + | ... | ||
| - | # rpm -qil openssh-server | + | ... |
| - | < | + | Signature |
| - | Release | + | Packager |
| - | Architecture: | + | |
| - | Install Date: Wed 23 Mar 2016 07:14:58 PM CET | + | |
| - | Group : System Environment/ | + | |
| - | Size : 943088 | + | |
| - | License | + | |
| - | Signature | + | |
| - | Source RPM : openssh-6.6.1p1-25.el7_2.src.rpm | + | |
| - | Build Date : Mon 21 Mar 2016 11:18:48 PM CET | + | |
| - | Build Host : worker1.bsys.centos.org | + | |
| - | Relocations : (not relocatable) | + | |
| - | Packager | + | |
| - | Vendor | + | |
| URL : http:// | URL : http:// | ||
| - | Summary | + | Summary |
| Description : | Description : | ||
| OpenSSH is a free version of SSH (Secure SHell), a program for logging | OpenSSH is a free version of SSH (Secure SHell), a program for logging | ||
| into and executing commands on a remote machine. This package contains | into and executing commands on a remote machine. This package contains | ||
| the secure shell daemon (sshd). The sshd daemon allows SSH clients to | the secure shell daemon (sshd). The sshd daemon allows SSH clients to | ||
| - | securely connect to your SSH server. | + | securely connect to your SSH server. You also need to have the openssh |
| + | package installed. | ||
| / | / | ||
| + | / | ||
| + | /etc/ssh | ||
| / | / | ||
| - | / | ||
| - | / | ||
| - | / | ||
| - | / | ||
| - | / | ||
| - | / | ||
| / | / | ||
| / | / | ||
| - | / | ||
| - | / | ||
| / | / | ||
| / | / | ||
| / | / | ||
| - | / | + | / |
| + | / | ||
| + | / | ||
| ==== openssh-askpass ==== | ==== openssh-askpass ==== | ||
| Zu guter Letzt sehen wir uns noch das Paket **openssh-askpass** genauer an: | Zu guter Letzt sehen wir uns noch das Paket **openssh-askpass** genauer an: | ||
| + | < | ||
| + | Name : openssh-askpass | ||
| + | Version | ||
| + | ... | ||
| - | # rpm -qil openssh-askpass | + | ... |
| - | < | + | Signature |
| - | Version | + | Packager |
| - | Release | + | |
| - | Architecture: | + | |
| - | Install Date: Sat 12 Nov 2016 08:22:40 PM CET | + | |
| - | Group : Applications/ | + | |
| - | Size : 15944 | + | |
| - | License | + | |
| - | Signature | + | |
| - | Source RPM : openssh-6.6.1p1-25.el7_2.src.rpm | + | |
| - | Build Date : Mon 21 Mar 2016 11:18:48 PM CET | + | |
| - | Build Host : worker1.bsys.centos.org | + | |
| - | Relocations : (not relocatable) | + | |
| - | Packager | + | |
| - | Vendor | + | |
| URL : http:// | URL : http:// | ||
| - | Summary | + | Summary |
| Description : | Description : | ||
| OpenSSH is a free version of SSH (Secure SHell), a program for logging | OpenSSH is a free version of SSH (Secure SHell), a program for logging | ||
| Zeile 205: | Zeile 156: | ||
| The key fingerprint is: | The key fingerprint is: | ||
| 2b: | 2b: | ||
| - | |||
| - | $ ssh-keygen -t ed25519 -o -a 100 -C django@nausch.org -f ~/ | ||
| - | |||
| - | |||
| Die // | Die // | ||
| Zeile 242: | Zeile 189: | ||
| </ | </ | ||
| ==== authorized_keys vs. authorized_keys2 ==== | ==== authorized_keys vs. authorized_keys2 ==== | ||
| - | <WRAP round tip>Bei der Einführung von SSH Version 2 kam die Datei '' | + | <WRAP round info>Bei der Einführung von SSH Version 2 kam die Datei '' |
| ===== ssh-Daemon ===== | ===== ssh-Daemon ===== | ||
| Zeile 310: | Zeile 257: | ||
| Von der Admin-Workstation aus, wollen wir nun nicht nur zum nächstgelegenen Host springen, sondern auch zum übernächsten oder gar zu einem Host im Internet, den wir aber aus Sicherheitsgründen nicht direkt erreichen dürfen und auch können. | Von der Admin-Workstation aus, wollen wir nun nicht nur zum nächstgelegenen Host springen, sondern auch zum übernächsten oder gar zu einem Host im Internet, den wir aber aus Sicherheitsgründen nicht direkt erreichen dürfen und auch können. | ||
| ==== System-Skizze ==== | ==== System-Skizze ==== | ||
| - | < | + | <uml> |
| state Firewall_A { | state Firewall_A { | ||
| Zeile 449: | Zeile 396: | ||
| Host daxie | Host daxie | ||
| Hostname < | Hostname < | ||
| - | ProxyCommand | + | ProxyCommand |
| </ | </ | ||
| Zeile 471: | Zeile 418: | ||
| * **[[http:// | * **[[http:// | ||
| - | ~~DISCUSSION~~ | + | |
django