Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
student:utilities:start:keypairs:beginner [2024/10/09 09:35] – [Tell stu this is all legit] brennildstudent:utilities:start:keypairs:beginner [2024/11/20 15:07] (current) – [Tell Github to join the party] stewarmc
Line 1: Line 1:
 ===== Getting Started with Authentication via Key-Pairs ===== ===== Getting Started with Authentication via Key-Pairs =====
  
-This documentation assumes you have never done anything with keypairs before (or at least that you have no recollection of having done so). +This documentation assumes you have **NEVER** done anything with keypairs before (or at least that you have no recollection of having done so). If you have done keypair stuff for CS 261, you can likely [[#tell_github_to_join_the_party|skip to the github section below]]. 
-Most of the sections of this document assume you have first followed the preceding sections (so you shoudl strongly consider following them in order).+Most of the sections of this document assume you have first followed the preceding sections (so you should strongly consider following them in order).
  
 ==== Prerequisites ==== ==== Prerequisites ====
Line 16: Line 16:
 ==== Generating a Key Pair ==== ==== Generating a Key Pair ====
   - Open a terminal window (specifically as specified above in the prerequisites).   - Open a terminal window (specifically as specified above in the prerequisites).
-  - In the terminal Type ''%%ssh-keygen -t rsa -b 4096 -C "Generated $(date -I)"%%''+  - In the terminal Type ''%%ssh-keygen -t ed25519 -b 4096 -C "Generated $(date -I)"%%''
     - when prompted for where to save the key, press Enter to save it in the default location.     - when prompted for where to save the key, press Enter to save it in the default location.
     - when prompted for a passphrase, do not enter one, just press enter to leave it blank.     - when prompted for a passphrase, do not enter one, just press enter to leave it blank.
Line 23: Line 23:
     - you will see a message like     - you will see a message like
  
-  Your identification has been saved in ~/.ssh/id_rsa +  Your identification has been saved in ~/.ssh/id_ed25519 
-  Your public key has been saved in ~/.ssh/id_rsa.pub+  Your public key has been saved in ~/.ssh/id_ed25519.pub
   The key fingerprint is:   The key fingerprint is:
   SHA256:dkzGbszeCq4x+N6nDzqwertya0si5CWQ4MQCHMW7Ju0 Generated 2024-10-07   SHA256:dkzGbszeCq4x+N6nDzqwertya0si5CWQ4MQCHMW7Ju0 Generated 2024-10-07
   The key's randomart image is:   The key's randomart image is:
-  +---[RSA 4096]----++  +---[ed25519 4096]----+
   |*o+.             |   |*o+.             |
   |=+ .     .       |   |=+ .     .       |
Line 52: Line 52:
     ServerAliveCountMax 120     ServerAliveCountMax 120
     AddKeysToAgent yes # https://man.openbsd.org/ssh_config#AddKeysToAgent     AddKeysToAgent yes # https://man.openbsd.org/ssh_config#AddKeysToAgent
-    IdentitiesOnly yes +    # IdentitiesOnly yes # I am thinking maybe I should not propose this for beginners. so it's commented out now. 
-  Host stu # by specifying the host here as "stu", you can use "stu" as a shorthand for the full hostname when connecting via ssh to the server at the HostName below+  Host stu # by specifying the host here as "stu", you can use "stu" as a shorthand for 
 +                   # the full hostname when connecting via ssh to the server at the HostName below
     HostName stu.cs.jmu.edu     HostName stu.cs.jmu.edu
     # next setting only necessary if you aren't using a default-named key like id_rsa or id_ed25519     # next setting only necessary if you aren't using a default-named key like id_rsa or id_ed25519
           # IdentityFile ~/.ssh/name-of_non_default_private_key           # IdentityFile ~/.ssh/name-of_non_default_private_key
-    User YOUR_EID # if you specify a user, you don't have to put the user@ when connecting via ssh+    User YOUR_EID_BUT_DONT_CAPITALIZE_IT # if you specify a user, you don't have to put the 
 +              # user@ when connecting via ssh
  
 ** NOTICE THE PART YOU HAVE TO REPLACE ABOVE, FOR MOST IT'S IN JUST THE LAST LINE WHERE IT SAYS "YOUR_EID" ** ** NOTICE THE PART YOU HAVE TO REPLACE ABOVE, FOR MOST IT'S IN JUST THE LAST LINE WHERE IT SAYS "YOUR_EID" **
Line 63: Line 65:
 ==== Tell stu this is all legit ==== ==== Tell stu this is all legit ====
  
-  - in your terminal (see prerequisite above for help opening the correct terminal for our purposes on your OS), enter ''%%ssh-copy-id stu%%''+  - in your terminal (see [[#prerequisites|prerequisite above for help opening the correct terminal for our purposes on your OS]]), enter ''%%ssh-copy-id stu%%''
     - you may see a message like ''%%The authenticity of host 'stu.cs.jmu.edu (134.126.141.221)' can't be established.     - you may see a message like ''%%The authenticity of host 'stu.cs.jmu.edu (134.126.141.221)' can't be established.
 ED25519 key fingerprint is SHA256:RYxaUOHGdifpo+JaJeE6JHWVqiji+in1GI5lvbJluPk. ED25519 key fingerprint is SHA256:RYxaUOHGdifpo+JaJeE6JHWVqiji+in1GI5lvbJluPk.
 This key is not known by any other names. This key is not known by any other names.
 Are you sure you want to continue connecting (yes/no/[fingerprint])?%%'', if you do, enter "yes" Are you sure you want to continue connecting (yes/no/[fingerprint])?%%'', if you do, enter "yes"
-    - you will be prompted for your (JMU EID) password. Enter it.+    - you will be prompted for your (JMU EID) password. Enter it. **NOTE: As you type your password, it is possible that nothing will be displayed in the terminal to protect your security.**
     - you should see a message like ''%%Number of key(s) added: 1%%''     - you should see a message like ''%%Number of key(s) added: 1%%''
     - you should now be able to ssh to stu without entering a password. try it: ''%%ssh stu%%''     - you should now be able to ssh to stu without entering a password. try it: ''%%ssh stu%%''
Line 74: Line 76:
  
 ==== Tell Github to join the party ==== ==== Tell Github to join the party ====
 +
 +**Note: For those who skipped here because of 261 reasons -  Open a terminal window (specifically as specified [[#prerequisites|above in the prerequisites]]).**
  
 If you want to do things with GitHub, you must first have an account. If you don't have one yet, [[https://github.com/signup|sign up for a GitHub account]]. If you want to do things with GitHub, you must first have an account. If you don't have one yet, [[https://github.com/signup|sign up for a GitHub account]].
  
-**Note:** it's possible that your quippy username that's served you well since middle school through that very public social media posting about that awkward thing that happened back in high school might be ok to keep around, but perhaps not as your personal-professional username. So maybe don't doxx yourself by making your github username relate to all your prior online activity. 😅+**Note:** it's possible that your quippy username that's served you well since middle school through that very public social media posting about that awkward thing that happened back in high school might be ok to keep around, but perhaps not as your personal-professional username. So maybe don't [[https://en.wikipedia.org/wiki/Doxing|doxx]] yourself by making your github username relate to all your prior online activity. 😅
  
   - Go to [[https://github.com/settings/ssh/new|Your GitHub SSH and GPG keys settings > New SSH Key page]].   - Go to [[https://github.com/settings/ssh/new|Your GitHub SSH and GPG keys settings > New SSH Key page]].
Line 83: Line 87:
   - Enter a name for the SSH key.   - Enter a name for the SSH key.
     * I suggest naming it based on the current computer you are using (try to be imaginative here. Imagine that this is but the first of many of ThatBrand™️ LapFlaps®️ that you will own in your long, laudable career). Consider something like, ''%%ThatDellWithThatOSv42%%''.     * I suggest naming it based on the current computer you are using (try to be imaginative here. Imagine that this is but the first of many of ThatBrand™️ LapFlaps®️ that you will own in your long, laudable career). Consider something like, ''%%ThatDellWithThatOSv42%%''.
-  - leave the browser there for a sec, and go back to your terminal and show your PUBLIC key to yourself by entering ''%%cat ~/.ssh/id_rsa.pub%%''+  - leave the browser there for a sec, and go back to your terminal and show your PUBLIC key to yourself by entering ''%%cat ~/.ssh/id_ed25519.pub%%''
     * copy the output of that command.     * copy the output of that command.
   - go back to the browser and paste your PUBLIC key's contents into the "Key" field.   - go back to the browser and paste your PUBLIC key's contents into the "Key" field.