Security Basics mailing list archives

Re: Begginner SSH question


From: Alexander Klimov <alserkli () inbox ru>
Date: Wed, 15 Dec 2004 17:59:50 +0200 (IST)

On Tue, 14 Dec 2004, VI wrote:
I want to use port forwarding with SSH between two WXP pro boxes. The remote
box must be a server and SSH must be run as a service.

The questions:
1- I think I need to create two ids(public Keys) and two private keys, one
for each box. Is this true?
No, if you want only one server it is enought to create a single keypair.

2- In which folder do I have to put these keys?
Installation of keys depends on particular ssh implementation (common choices
are openssh (http://sshwindows.sourceforge.net/) for client and server, and
PuTTY (http://www.chiark.greenend.org.uk/~sgtatham/putty/) if you need a client
with xterm terminal emulator). Public key should be on the server, private on
the client.

3- How do I specify the path of these keys from command line when using ssh?
for openssh (man ssh):
     -i identity_file

4- Can I create the keys in OpenSSL, and use AES too? If yes what would be
the format of the keys?
Probably, if you want openssl you should look at stunnel for simple port
forwarding instead:
http://www.stunnel.org/download/binaries.html

BTW: there is also secureshell () securityfocus com devoted specifically to ssh

-- 
Regards,
ASK


Current thread: