openssh入门

ssh (secure shell),ssh协议支持登录及文件的传输加密防止数据截留！

01、下载

https://www.ssh.com/                                              ###商业

https://www.openssl.org                                           ###开源

http://www.openssh.com/                                         ###开源ssh

http://www.openssh.com/portable.html

http://www.ftp.ne.jp/OpenBSD/OpenSSH/portable/    ###日本

https://www.openssl.org/source/snapshot/

02、安装

openssh

openssh-server

openssh-client

yum install -y openssh-server

03、测试

/etc/init.d/sshd   start

service sshd   start| restart | stop

配置文件

/etc/ssh/ssh_config

/etc/ssh/sshd_config

详细配置文件说明：http://www.cnblogs.com/xiaochina/p/5802008.html

ssh-keygen -t  rsa |dsa   #生成公私秘钥

id_rsa     私钥                                                 #私钥很关键不要随意传播

id_rsa.pub    公钥    --- authorized_keys

cat id_rsa.pub >>/root/.ssh/authorized_keys  #公钥位于target_server(登录的目标机器)

ssh对登陆限制：http://www.cnblogs.com/xiaochina/p/5920057.html

04、ssh登录

#ssh相关命令

ss                       sshd                     sssd
ssh                      ssh-keygen               sss_ssh_authorizedkeys
ssh-add                  ssh-keyscan              sss_ssh_knownhostsproxy
ssh-agent                ssltap                   
ssh-copy-id              sss_cache

[root@mvpbang ~]# ssh
usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
           [-D [bind_address:]port] [-e escape_char] [-F configfile]
           [-I pkcs11] [-i identity_file]
           [-L [bind_address:]port:host:hostport]
           [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
           [-R [bind_address:]port:host:hostport] [-S ctl_path]
           [-W host:port] [-w local_tun[:remote_tun]]
           [user@]hostname [command]

ssh root@172.24.0.24

ssh -l mvp  172.24.0.24

ssh   172.24.0.24     #读取当前用户名作为登录用户名

/root/.ssh/known_hosts    #本机ssh远程登录Linux保存远程机器的公钥，用于安全传输数据

05、scp文件传输

[root@mvpbang ~]# scp
usage: scp [-1246BCpqrv] [-c cipher] [-F ssh_config] [-i identity_file]
           [-l limit] [-o ssh_option] [-P port] [-S program]
           [[user@]host1:]file1 ... [[user@]host2:]file2

scp   xxx   root@172.24.0.24:~              #上传

scp  root@172.24.0.24:/etc/passwd   ~  #下载

06、sftp安全传输ftp

[root@mvpbang ~]# sftp

usage: sftp [-1Cv] [-B buffer_size] [-b batchfile] [-F ssh_config]
            [-o ssh_option] [-P sftp_server_path] [-R num_requests]
            [-S program] [-s subsystem | sftp_server] host
       sftp [user@]host[:file ...]
       sftp [user@]host[:dir[/]]
       sftp -b batchfile [user@]host

sftp用法跟ftp基本没啥差异