2 \frametitle{Public key authentication
}
5 Mogelijk geen wachtwoord en veiliger
8 \begin{block
}{Command line vlag
}
9 \lstinline{ssh -i ~/.ssh/keyfile user@server.nl
}
12 \begin{block
}{Config file
}
13 \lstinline{IdentityFile ~/.ssh/keyfile
}
17 \begin{frame
}[fragile
]
18 \frametitle{Public key authentication
}
19 \framesubtitle{Genereren van een sleutelpaar
}
20 \begin{block
}{\$ ssh-keygen
}
22 Generating public/private rsa key pair.
23 Enter file in which to save the key (/home/user/.ssh/id_rsa):
24 /home/user/.ssh/github
25 Enter passphrase (empty for no passphrase):
26 Enter same passphrase again:
27 Your identification has been saved in /home/user/.ssh/github.
28 Your public key has been saved in /home/user/.ssh/github.pub.
29 The key fingerprint is:
30 92:
92:
6e:b8:
3f:d5:
76:e8:
1b:
73:ed:
97:c4:e5:
87:ba user@system
31 The key's randomart image is:
47 \begin{frame
}[fragile
]
48 \frametitle{Public key authentication
}
49 \framesubtitle{Installeren van een sleutel
}
50 \begin{block
}{Publieke sleutel:
\textasciitilde/.ssh/github.pub
}
52 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBrgcK05XzRRbtmPyXQner5ef8
53 suOAErDvInRDQbl2bjR0PGizL2t5lM9zE+mS0HHigteGLKma1NxVBBeam0CrodJN
54 BcW55x3LR/
2fLSujUqcloQNwLUpD5da6eGg9yPo1fEaAOK1ssHGA30o6nmDEZEHy
55 PFgBtPwtDw5TPXPpzslaJx1u7CdeyzqpYsUycxzboy3GBcCsvG4nzD4C9vd0yk5o
56 jlDeECul4mwyg7NuEjltaY89RzrSa8NtqtURyg/JFQW2IVGe+oBXeTL/eQRuo1Nj
57 GhYyPm1VMVM+NvaYQZXxGfLpoDoP2V+deD+gP5DuC8WW4LSGnkHKhDEin0Yl mar
62 \begin{block
}{Geheime sleutel:
\textasciitilde/.ssh/github
}
64 -----BEGIN RSA PRIVATE KEY-----
65 9RnNnrD2DkJBqoX/Aph2wVZg1y/I8t27C7yPR66xUNyHWG4J+k+q7REhA/K4fvjl
66 NNvNtbc4EeNI+NxaaftH1qo6yBIF5yDwuEYKixeconLCeGl9/exdlyMyXbuuTrU9
67 d5DgKnWxgJPHnDjmwqTeX3A5S34m/qJKK67IF9WqedeHxeMKzMZYcZpcsFxdvHk/
69 -----END RSA PRIVATE KEY-----
73 \begin{block
}{Installeren op de server
}
74 De inhoud van het publieke bestand moet in
75 \lstinline{~/.ssh/authorized_keys
} komen te staan
79 \begin{frame
}[fragile
]
80 \frametitle{X forwarding
}
82 Grafische programma's draaien op een machine die niet perse binnen
86 \begin{block
}{Command line vlag
}
87 \lstinline{ssh -X user@server.nl
}
90 \begin{block
}{Config file
}
91 \lstinline{ForwardX11 yes
}
100 \frametitle{Port forwarding
}
102 Onversleutelde communicatie versleutelen
105 \begin{block
}{Command line vlag
}
106 \lstinline{ssh -L port:host:hostport
}\\
107 \lstinline{ssh -R port:host:hostport
}
110 \begin{block
}{Config file
}
111 \lstinline{LocalForward port host:hostport
}\\
112 \lstinline{RemoteForward port host:hostport
}
117 \frametitle{Agent forwarding
}
119 Je SSH cache meenemen naar een andere server
122 \begin{block
}{Command line vlag
}
123 \lstinline{ssh -A user@system
}
126 \begin{block
}{Config file
}
127 \lstinline{ForwardAgent yes
}
132 \frametitle{SOCKS proxy
}
134 Al je internet verkeer via een
\textit{vertrouwde
} locatie laten lopen
137 \begin{block
}{Command line vlag
}
138 \lstinline{ssh -D port
}
141 \begin{block
}{Config file
}
142 \lstinline{DynamicForward port
}
145 \begin{block
}{Instellen in Chromium
}
146 \lstinline{chromium --proxy-server="socks5://host:
8080" --host-resolver-rules="MAP *
0.0.0.0 , EXCLUDE host"
}
151 \frametitle{Instellen in Firefox
}
152 Edit - Preferences - Advanced - Network - Settings
153 \includegraphics[width=
200px
]{./img/firefox_socks.png
}