I set a passphrase when creating a new SSH key on my laptop. But, as I realise now, this is quite painful when you are trying to commit ([Git][1] and [SVN][2]) to a remote location over SSH many times in an hour.

One way I can think of is, delete my SSH keys and create new. Is there a way to remove the passphrase, while still keeping the same keys?

  [1]: http://en.wikipedia.org/wiki/Git_%28software%29
  [2]: http://en.wikipedia.org/wiki/Apache_Subversion


How do I remove the passphrase for the SSH key without having to create a new key?

So there are plenty of tutorials on how to convert a `PEM` to a `PPK` using `puttyGen`. However my issue is that my windows machine had the only `PEM` copy and I converted it into a `PPK` and deleted it. Now I need to figure out how to convert a `PPK` into a `PEM` so that my mac can `ssh` into the server. I still have access to the server so I could also just make a new key if I had to, anyone know how to convert `PPK` to `PEM`?  

Create a PEM from a PPK file

Recently I&#39;ve been unable to clone or push to github, and I&#39;m trying to find the root cause.

*This is on windows*

I have cygwin + git as well as msysgit.

Msysgit was installed with the following options:

 - OpenSSH
 - Use Git from Windows Command Prompt

That gives me 4 environments to try to use git in:

 - Windows cmd prompt
 - Powershell
 - Git Bash
 - Cygwin

Somehow I&#39;ve managed to get myself into a position where when I try to clone a repository using msysgit, cmd.exe, or Powershell, I get the following error:

    &gt; Initialized empty Git repository in
    &gt; C:/sandbox/SomeProject/.git/
    &gt; @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    &gt; @    WARNING: UNPROTECTED PRIVATE KEY FILE!          @
    &gt; @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    &gt; Permissions 0644 for
    &gt; &#39;/c/Users/Ben/.ssh/id_rsa&#39; are too
    &gt; open. It is recommended that your
    &gt; private key files are NOT accessible
    &gt; by others. This private key will be
    &gt; ignored. bad permissions: ignore key:
    &gt; /c/Users/Ben/.ssh/id_rsa Permission
    &gt; denied (publickey). fatal: The remote
    &gt; end hung up unexpectedly


This is using the .ssh folder in my c:\users\ben\ folder, which is what is used by msysgit. *I suspect cygwin works because the .ssh folder is located elsewhere, but I&#39;m not sure why*

In Git Bash, I check the permissions:

    $ ls -l -a ~/.ssh

Which gives me:

    drwxr-xr-x    2 Ben      Administ        0 Oct 12 13:09 .    
    drwxr-xr-x   34 Ben      Administ     8192 Oct 12 13:15 ..    
    -rw-r--r--    1 Ben      Administ     1743 Oct 12 12:36 id_rsa
    -rw-r--r--    1 Ben      Administ      399 Oct 12 12:36 id_rsa.pub    
    -rw-r--r--    1 Ben      Administ      407 Oct 12 13:09 known_hosts

These permissions are apparently too relaxed.  How they got this way, I have no idea.

I can try to change them...

    $ chmod -v -R 600 ~/.ssh

which tells me:

    mode of `.ssh&#39; changed to 0600 (rw-------)
    mode of `.ssh/id_rsa&#39; changed to 0600 (rw-------)
    mode of `.ssh/id_rsa.pub&#39; changed to 0600 (rw-------)
    mode of `.ssh/known_hosts&#39; changed to 0600 (rw-------)

But it seems to have no effect.  I still get the same error, and doing 

    $ ls -l -a ~/.ssh

yields the same permissions as before.

**UPDATE:**

I tried to fix the permissions to those files in cygwin, and cygwin reports their permissions correctly, gitbash does not:
![alt text][1]


Any ideas on how I can really fix these permissions?


  [1]: http://cdn.cloudfiles.mosso.com/c54102/app7962031255448924.jpg

SSH Private Key Permissions using Git GUI or ssh-keygen are too open

I need to create a script that automatically inputs a password to OpenSSH `ssh` client.

Let&#39;s say I need to SSH into `myname@somehost` with the password `a1234b`.

I&#39;ve already tried...

    #~/bin/myssh.sh
    ssh myname@somehost
    a1234b

...but this does not work.

How can I get this functionality into a script?

Automatically enter SSH password with script

I want to use multiple private keys to connect to different servers or different portions of the same server (my uses are system administration of server, administration of Git, and normal Git usage within the same server). I tried simply stacking the keys in the `id_rsa` files to no avail.

Apparently a straightforward way to do this is to use the command 
      
    ssh -i &lt;key location&gt; login@server.example.com 

That is quite cumbersome.

Any suggestions as to how to go about doing this a bit easier?


Best way to use multiple SSH private keys on one client

I have a certificate in `der` format, from it with this command I generate a public key:

    openssl x509 -inform der -in ejbcacert.cer -noout -pubkey &gt; pub1key.pub

Which results in this:

    -----BEGIN PUBLIC KEY-----
    MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7vbqajDw4o6gJy8UtmIbkcpnk
    O3Kwc4qsEnSZp/TR+fQi62F79RHWmwKOtFmwteURgLbj7D/WGuNLGOfa/2vse3G2
    eHnHl5CB8ruRX9fBl/KgwCVr2JaEuUm66bBQeP5XeBotdR4cvX38uPYivCDdPjJ1
    QWPdspTBKcxeFbccDwIDAQAB
    -----END PUBLIC KEY-----

How can I obtain a public key like this? Either from certificate or
from this public key?

    ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC7vbqajDw4o6gJy8UtmIbkcpnkO3Kwc4qsEnSZp/TR+fQi62F79RHWmwKOtFmwteURgLbj7D/WGuNLGOfa/2vse3G2eHnHl5CB8ruRX9fBl/KgwCVr2JaEuUm66bBQeP5XeBotdR4cvX38uPYivCDdPjJ1QWPdspTBKcxeFbccDw==

This was obtained with this command:

    ssh-keygen -y -f private_key1.pem &gt; public_key1.pub


Convert pem key to ssh-rsa format

I have been using Putty on Windows XP and used the .ppk file to connect to my Linux servers (several servers).

On the servers I have the following folder and file ~/.ssh/authorized_keys

I now want to use a Mac to connect via the terminal. I have set up the remote connections to the servers manually and want to know how I can setup using the ppk file or the private/public key within it.

Please note : I already am using private/public key login from Windows so I do not need to create a new key using keygen, I just want to know how to set up now that I have the keys already. (In other words, I already have the authorized key lists on the server, and the public and private key).

Use PPK file in Mac Terminal to connect to remote connection over SSH

I was trying to setup an SSH connection with Github following this tutorial:

* [Testing your SSH connection](https://docs.github.com/en/github/authenticating-to-github/connecting-to-github-with-ssh/testing-your-ssh-connection)

I came across the following command: 

    $ ssh -T git@github.com 
    # Attempts to ssh to github

Curious, I looked at the ssh manual. It said the following:

     -T      Disable pseudo-tty allocation.

What is tty allocation? What does tty stand for? Why are we disabling it?&lt;br&gt;I earnestly tried to look it up but I was unable to find even a definition.

What is Pseudo TTY-Allocation? (SSH and Github)

(I am using MAC)

My id_rsa starts with

    -----BEGIN OPENSSH PRIVATE KEY-----

but I expect it to starts with 

    -----BEGIN RSA PRIVATE KEY-----

I have send my id_rsa.pub to server administrator to get the access to server, so I don&#39;t want to generate a new key. 

1. Is there any way that I can transfer my id_rsa which is a openssh private key to a RSA private key?  (command please.)

2. If I can transfer, do I also need to transfer id_rsa.pub? (command please.) It seems id_rsa.pub doesn&#39;t have a header like id_rsa, so I am not sure if I should also transfer this.



Openssh Private Key to RSA Private Key

I am having issues setting up OpenSSH for Windows, using public key authentication.

I have this working on my local desktop and can ssh with a key from Unix machines or other OpenSSH for Windows machines.

I have replicated the build onto a server, I can get password authentication working fine, but when I use the keys I get the following issue:

    debug1: Authentications that can continue: publickey,password,keyboard-interactive
    debug3: start over, passed a different list publickey,password,keyboard-interactive
    debug3: preferred publickey,keyboard-interactive,password
    debug3: authmethod_lookup publickey
    debug3: remaining preferred: keyboard-interactive,password
    debug3: authmethod_is_enabled publickey
    debug1: Next authentication method: publickey
    debug1: Offering RSA public key: /cygdrive/c/sshusers/jsadmint2232/.ssh/id_rsa
    debug3: send_pubkey_test
    debug2: we sent a publickey packet, wait for reply
    Connection closed by 127.0.0.1

So for the purposes of testing, I have been just trying to SSH to localhost, but even when tried remotely I get the same issue.

Even more strange, is that when I have both password and public key enabled in `sshd_config`, it will only attempt to use keys and then bomb out with the above message and won&#39;t even try to use password.

Here are the steps I have taken:

1. Install OpenSSH for Windows
2. `mkgroup -l &gt;&gt;..\etc\group` (added local groups)
3. `mkgroup -d &gt;&gt;..\etc\group` (added domain groups)
4. `mkpasswd -L -u openssh &gt;&gt;..\passwd` (added my local user)
5. `mkpasswd -D -u jsadmint2232 &gt;&gt;..\passwd` (added my domain user)
6. Edited the homedir in file *passwd* to point to c:\sshusers\%USER% - where %USER% is the user name
7. Enabled password authentication, disabled key authentication
8. Created SSH keys for both jsadmint2232 / OpenSSH and ensured that the files were created in home directories
9. Added authorized_keys files into .ssh directories for each user and added keys for incoming connecting users
10. `net stop opensshd` / `net start opensshd`
11. Test if password authentication works both locally and remotely
12. Updated sshd_config, to enabled key auth - restart opensshd
13. Test connection and get above error. Also, it doesn&#39;t even try password authentication.
14. Updated sshd_config, to disable password authentication completely - restart opensshd
15. Test connection and still get above error

It appears the server is killing the connection for some reason.


Setting up OpenSSH for Windows using public key authentication

I see stuff all over Google on how to see the RSA key fingerprint, but not the ECDSA fingerprint.

What command do I use to see what the ECDSA key fingerprint of my server is?

I&#39;ve installed openssh for windows and when I run `ssh localhost` I get 
&gt; Bad owner or permissions on C:\\Users\\gary/.ssh/config

I&#39;ve looked at these 2 questions https://superuser.com/questions/348694/bad-owner-or-permissions-error-using-cygwins-ssh-exe and https://serverfault.com/questions/253313/ssh-returns-bad-owner-or-permissions-on-ssh-config but none of the answers work for me.  sshd is running as a service as the Local System user.  I&#39;ve run `chmod 0600 C:\Users\gary\.ssh\config` and `chown gary C:\Users\gary\.ssh\config`.  I&#39;ve also cleared the ACL by running `setfacl -b C:\Users\gary\.ssh\config` and then `chmod 0600 C:\Users\gary\.ssh\config` again.  I&#39;ve also tried changing the owner to SYSTEM and got the same error.

I&#39;m not sure what else to do, is there anything wrong with my setup?  I also have git installed which installed mingw, I deleted ssh and sshd from my git installation so they wouldn&#39;t be on my path.

Other commands I&#39;ve run are
`icacls &quot;C:\Users\gary\.ssh\config&quot; /setowner gary`
`chown -R gary:1049089 C:\Users\gary\.ssh`

`ls -la C:\Users\gary\.ssh\config` shows 
&gt;-rw-r--r-- 1 gary 1049089 229 Jan  3 14:43 &#39;C:\Users\gary\.ssh\config&#39;

it keeps showing this even after changing the owner to SYSTEM, but in the file properties in file explorer it shows SYSTEM as the owner


openssh windows bad owner or permissions

I think I forgot the passphrase for my SSH key, but I have a hunch what it might be.  How do I check if I&#39;m right?

How do I verify/check/test/validate my SSH passphrase?

EDIT: Putting exactly what was done

I need to SSH localhost without password, the usual way of doing it (with public keys) do not work.

    user@PC:~$ rm -rf .ssh/*
    user@PC:~$ ssh-keygen -t rsa &gt; /dev/null 
    Enter file in which to save the key (/home/user/.ssh/id_rsa): 
    Enter passphrase (empty for no passphrase): 
    Enter same passphrase again: 
    user@PC:~$ ls .ssh/
    id_rsa  id_rsa.pub
    user@PC:~$ ssh-copy-id -i localhost 
    The authenticity of host &#39;localhost (::1)&#39; can&#39;t be established.
    RSA key fingerprint is f7:87:b5:4e:31:a1:72:11:8e:5f:d2:61:bd:b3:40:1a.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added &#39;localhost&#39; (RSA) to the list of known hosts.
    user@localhost&#39;s password: 
    Now try logging into the machine, with &quot;ssh &#39;localhost&#39;&quot;, and check in:
    
      .ssh/authorized_keys
    
    to make sure we haven&#39;t added extra keys that you weren&#39;t expecting.
    
    user@PC:~$ ssh-agent $SHELL
    user@PC:~$ ssh-add -L
    The agent has no identities.
    user@PC:~$ ssh-add 
    Identity added: /home/user/.ssh/id_rsa (/home/user/.ssh/id_rsa)
    user@PC:~$ ssh-add -L
    ssh-rsa ...MY KEY HERE

    user@PC:~$ ssh-copy-id -i localhost 
    user@localhost&#39;s password: 
    Now try logging into the machine, with &quot;ssh &#39;localhost&#39;&quot;, and check in:
    
      .ssh/authorized_keys
    
    to make sure we haven&#39;t added extra keys that you weren&#39;t expecting.
    
    user@PC:~$ ssh localhost echo &#39;testing&#39;
    user@localhost&#39;s password: 
    
    user@PC:~$ 

 
So as you can see in the last command it is still asking the password!
How can I fix that? Ubuntu-10.04, OpenSSH_5.3p1


EDIT2:

Adding some info about the sshd


    user@PC:~$ cat /etc/ssh/sshd_config | grep Authentication
    # Authentication:
    RSAAuthentication yes
    PubkeyAuthentication yes
    RhostsRSAAuthentication no
    HostbasedAuthentication no
    # Uncomment if you don&#39;t trust ~/.ssh/known_hosts for RhostsRSAAuthentication
    ChallengeResponseAuthentication no
    # PasswordAuthentication yes
 

EDIT3: Ading result from $ssh -vv localhost

    $ssh -vv localhost
    ...
    debug1: Authentications that can continue: publickey,password
    debug1: Next authentication method: publickey
    debug1: Trying private key: /home/user/.ssh/identity
    debug1: Offering public key: /home/user/.ssh/id_rsa
    debug2: we sent a publickey packet, wait for reply
    debug1: Authentications that can continue: publickey,password
    debug1: Trying private key: /home/user/.ssh/id_dsa
    debug2: we did not send a packet, disable method
    debug1: Next authentication method: password
    user@localhost&#39;s password: 


How to ssh to localhost without password?

The implementation of key handling with (Tortoise)Git for Windows confuses me. As far as I understood, you can implement with either `ssh.exe` (gits own ssh program), where you can then choose an ssh key per host in your `ssh_config` in the &#39;faked&#39; home dir. For me, that is not really applicable, because I have multiple Bitbucket accounts using different keys but all the same host.  
  
Then there is a way to use `TortoiseGitPlink`. You basically set up pageant with a putty generated key and let TortoiseGit use that one - with the environment variable `SSH_GIT` set to your TortoiseGitPlink.exe).  
  
Now my question is the following: I just created an ssh2 rsa key with default options using `ssh-keygen -t rsa -f ~/.ssh/rsa_key` command in GitBash. I tried loading this file into `pageant.exe` by using its GUI. I got the error: `Couldn&#39;t load this key (OpenSSH-SSH-2 private key)`.  

What is the problem with this key? Made in GitBash it should adhere all standard openSSH guidelines. Is it correct that there are differences in puTTY keys and openSSH keys?

Pageant does not load SSH-2 key generated with GitBash

I want to use scp command to copy a local file to remote server, but I get an error message after input the password of user in remote server.

    ~]$ scp gitadmin.pub git@123.150.207.18:
    git@123.150.207.18&#39;s password: 
    bash: scp: command not found
    lost connection

I checked on server using the git user and it seems the scp command can be found and openssh-clinets were installed too.

    git@... ~]$ scp
    usage: scp [-1246BCpqrv] [-c cipher] [-F ssh_config] [-i identity_file]
               [-l limit] [-o ssh_option] [-P port] [-S program]
               [[user@]host1:]file1 ... [[user@]host2:]file2
    git@... ~]$ su root
    ......
    root@... ~]# yum info openssh-clients
    Loaded plugins: product-id, subscription-manager
    Updating Red Hat repositories.
    Installed Packages
    Name        : openssh-clients
    Arch        : x86_64
    Version     : 5.3p1
    Release     : 52.el6
    Size        : 1.0 M
    Repo        : installed
    From repo   : anaconda-RedHatEnterpriseLinux-201105101844.x86_64
    Summary     : An open source SSH client applications
    URL         : http://www.openssh.com/portable.html
    License     : BSD
    Description : OpenSSH is a free version of SSH (Secure SHell), a program for
                : logging into and executing commands on a remote machine. This
                : package includes the clients necessary to make encrypted
                : connections to SSH servers.

I&#39;m confused for the situation. Did I missing some configuration on server? (We are using RHEL6 as server.)


-------------------------------------------------------
It&#39;s my fault in path setting.
I added &#39;custom.sh&#39; in /etc/profile.d and added following lines in it to add /usr/local/node/bin directory to PATH.

    export PATH=&quot;/usr/local/node/bin:$PATH&quot; 
But the format is wrong. I removed the pair of &#39;&quot;&#39; and it works OK now. It should be:

    export PATH=$PATH:/usr/local/node/bin

A probe mistake...^_^



Error when using scp command &quot;bash: scp: command not found&quot;

I&#39;m unable to ssh and rysnc to a remote system. It keeps giving this error message:




    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     
          
    IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
    Someone could be eavesdropping on you right now (man-in-the-middle attack)!
    It is also possible that a host key has just been changed.
    The fingerprint for the RSA key sent by the remote host is
    a3:8f:7c:07:c9:12:d8:aa:cd:c2:ba:b3:27:68:bc:c2.
    Please contact your system administrator.
    Add correct host key in /root/.ssh/known_hosts to get rid of this message.
    Offending RSA key in /root/.ssh/known_hosts:8
    RSA host key for xxx.xxx.xxx.xxx has changed and you have requested strict checking.
    Host key verification failed.
    rsync: connection unexpectedly closed (0 bytes received so far) [sender]
    rsync error: unexplained error (code 255) at io.c(601) [sender=3.0.8]

I&#39;ve removed `authorized_keys` file from `/home/user/.ssh`.

Ubuntu-ssh - - WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED

Problem Is: Some SFTP connections are failing in customer environment
             But using sample code if i test with same server no connection is failed.
             may be in customer envi many parallel sftp connection started at a time.

I Want to know what is the meaning of MaxStartups 10:30:60

In the above i know only 10 , which means maximum unauthenticated ssh connection allowed.
means at same time 12 sssh connection request comes 2 request fail and 10 success.

What is the mean of 30 and 60 ?

In SSHD Configuration what does &quot;MaxStartups 10:30:60&quot; mean?

When I try to start the ssh-agent on Windows 10 via PowerShell (with elevated right or without) by entering `Start-Service ssh-agent` I get the error

&gt; unable to start ssh-agent service, error :1058

When I check of the service is running via `Get-Service ssh-agent` is returns that the service is stopped.

How can I get the ssh-agent running?

All Openssh Solutions on Gang of Coders

Total of 19 Openssh Solutions