[SOLVED] Managing multiple RSA ssh key sets?

Ryanms3030 · 03-06-2014, 04:18 PM

I have just started moving to using RSA keys for my ssh authentications instead of passwords. I have one cloud based server, one local server and two vm servers on my local. I log into them from 3 different clients (laptop, work computer and my phone).

I want to make sure I have all the right keys in the right places so I can disable password logins all together. I started making keys and testing and copied them to back them up but I was stupid and didn't label them in a way that I know which pair goes with which server.

Can I just recreate the keys and copy the new key to my servers and over write the existing keys? Or if not is it ok to have multiple public keys on the servers?

I'm trying to set this all up without locking myself out (especially on the cloud where I can't get in front of the machine)

Habitual · 03-06-2014, 04:35 PM

I make directories under .ssh and stick all my client keyfiles there in a directory for each, one per client.
I make heavy use of aliases that do all the typing for me.

Code:

alias grid1='ssh -i /home/jj/.ssh/c9/c9grids [email]user@ipa.ddr.ess'

I know this all can be simplified in an ~/.ssh/config file, I just haven't taken the time to do so.

Quote:

Originally Posted by Ryanms3030

Can I just recreate the keys and copy the new key to my servers and over write the existing keys? Or if not is it ok to have multiple public keys on the servers?

naw, you can just copy the contents of your main key.pub (or the one you just made) to any server you want to access. Or... copy the contents of say, /root/authorzed_keys (or keys2) to any server you wish access to.

Fire away!

Ryanms3030 · 03-06-2014, 04:53 PM

Thanks again!

Habitual · 03-07-2014, 08:11 AM

Quote:

Originally Posted by Ryanms3030

Thanks again!

You're very welcome!

Here's how I "organize" some of my dozens of aliases and their keys:

Code:

source /home/jj/.ssh/c9/c9.hosts
source /home/jj/.ssh/c9/amn.hosts
source /home/jj/.ssh/c9/savvis.hosts
source /home/jj/.ssh/c9/dataworks.hosts
source /home/jj/.ssh/c9/lavoult.hosts
source /home/jj/.ssh/c9/Enkantika.hosts

in my ~/.bashrc
each of those .hosts file has the client's hosts' aliases in them, eg:

Code:

cat /home/jj/.ssh/c9/lavoult.hosts
alias lvlb01="ssh -i /home/jj/.ssh/LaVoult/matt_root_c9 root@123.456.xxx.xxx"
alias lvgtwy01="ssh -i /home/jj/.ssh/LaVoult/matt_root_c9 root@123.456.xxx.xxx"
alias lvweb01="ssh -i /home/jj/.ssh/LaVoult/matt_root_c9 root@123.456.xxx.xxx"
alias lvdb01="ssh -i /home/jj/.ssh/LaVoult/matt_root_c9 root@123.456.xxx.xxx"
alias lvweb01a="ssh -i /home/jj/.ssh/LaVoult/matt_root_c9 root@123.456.xxx.xxx"

One of the benefits I found for this method is I don't have to go digging if I need to change one host entry, I know it's in a .hosts file on my system. A simple edit and reload .bashrc and I'm good.

Hope that helps.

grim76 · 03-07-2014, 09:28 AM

You can also use a file named config in your .ssh location. I use that to specify settings and keys for some of the environments that I manage.

Habitual · 03-07-2014, 11:13 AM

Quote:

Originally Posted by grim76

You can also use a file named config in your .ssh location. I use that to specify settings and keys for some of the environments that I manage.

I knew of this method and could be using it, but I'm a stick in the mud!

lleb · 03-07-2014, 01:41 PM

i personally use the config file in my ~/.ssh/ directory for this type of work as grim76 pointed out. read up on some of the links i have in my sig.

Ryanms3030 · 03-07-2014, 04:18 PM

So I have this figured out from Linux client but I am also trying to set it up from a Win client with Putty. I have followed a couple of different tutorials such as this (they all had the same basic steps)

https://www.digitalocean.com/communi...nnect-to-a-vps

But I can't connect from Putty unless I log in with user/pass. In putty after setting up the keys when I click ok to connect nothing happens.

Ryanms3030 · 03-07-2014, 07:32 PM

Disregard my last post , I was being stupid. I forgot to the host name in the Putty session screen. I thought I had it saved to a session but guess not. I have it all working now. Thanks