Ssh Certificate realizes two-way Mutual Trust

Ssh Certificate realizes two-way Mutual Trust

1. Generate key

two。 Transfer the public key of the generated key to the machines of 0.3 and 0.4 respectively, and remotely do not need a password

Test whether you want a password from 0.2 to 0.3 and 0.4

As can be seen in the above picture, the password is no longer needed. We can also generate keys at 0.3 and 0.4 and transmit the public key to the host of 0.2, which does not require a password for remote access to 0.2.

Then go to 0.2and put the information of its two files into the authorized_keys file.

Test:

The extension of SSH: 1. The configuration file is: / etc/ssh/sshd_config ssh service default port is 22, you can write the port option in the configuration file by default 2.SSH is through the password and key two methods, if you only want to support encryption methods can, modify the main configuration file to change its PasswordAuthication to no 3. When your machine is connected, you can use your life: ssh-k: number to kick out the machine you don't want to connect to. Synchronization script 1. First create a large file for testing

two。 Create a script to do the test

As shown in the figure above, the returned value is the same as the source file.