{"id":2184,"date":"2022-02-25T06:14:13","date_gmt":"2022-02-25T06:14:13","guid":{"rendered":"https:\/\/blog.samarthya.me\/wps\/?p=2184"},"modified":"2022-02-25T06:16:48","modified_gmt":"2022-02-25T06:16:48","slug":"ssh-protocol","status":"publish","type":"post","link":"https:\/\/blog.samarthya.me\/wps\/2022\/02\/25\/ssh-protocol\/","title":{"rendered":"SSH Protocol"},"content":{"rendered":"\n
<\/div>
\n
\"\"<\/div>
Me<\/div><\/div>

What is SSH protocol?<\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
SSH<\/div><\/div>

It is also referred to as Secure Shell, is a method for secure remote login from one computer to another. It is an alternative to telnet<\/code> and rlogin<\/code><\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
SSH<\/div><\/div>

\u00a0It protects the communications security and integrity with strong encryption.<\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
Me<\/div><\/div>

How does it work?<\/p><\/div><\/div>\n\n\n\n

\n
\"\"<\/div>
SSH<\/div><\/div>

– It works in client server model. <\/p>

– The SSH client drives the connection setup and uses public key cryptography<\/code> to verify the identity of the SSH server.\u00a0<\/p>

– Once a connection is established data that is transmitted is encrypted according to the parameters negotiated in the setup.\u00a0<\/p><\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\"\"<\/div>
SSH<\/div><\/div>

After the setup phase is done, SSH protocol uses strong symmetric encryption<\/strong> and hashing algorithms<\/strong> to ensure the privacy and integrity of the data that is exchanged.<\/p>

RFC – Link<\/a><\/p><\/div><\/div>\n<\/div><\/div>\n\n\n\n

\"\"\/
From SSH.com<\/figcaption><\/figure>\n\n\n\n
\"\"<\/div>
Me<\/div><\/div>

What are the options to initiate SSH?<\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
SSH<\/div><\/div>

Amongst the several methods available the most common ones are passwords<\/code> and public key authentication<\/code>.<\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
SSH<\/div><\/div>

In most of automation cases the public key authentication method is preferred. (ANSIBLE uses it)<\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
Me<\/div><\/div>

Is it driven via a cryptographic key pair – public key and private key?<\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
SSH<\/div><\/div>

Duh? <\/p>

The keys used for authentication are called SSH keys.<\/p>

Configure the public key on a server to\u00a0authorize access\u00a0and grant anyone who has a copy of the private key access to the server. <\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
Me<\/div><\/div>

But WHY Public key?<\/p><\/div><\/div>\n\n\n\n

\"\"<\/div>
SSH<\/div><\/div>

– Why not – It is passwordless login, and yet more secure?<\/p>

– The motivation for using public key authentication over simple passwords is security.<\/p>

– Public key authentication provides cryptographic strength that even extremely long passwords can not offer<\/p><\/div><\/div>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":1395,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"image","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[34,239],"tags":[21,246],"class_list":["post-2184","post","type-post","status-publish","format-image","has-post-thumbnail","hentry","category-technical","category-technical-2","tag-learn","tag-ssh","post_format-post-format-image"],"_links":{"self":[{"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/posts\/2184","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/comments?post=2184"}],"version-history":[{"count":0,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/posts\/2184\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/media\/1395"}],"wp:attachment":[{"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/media?parent=2184"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/categories?post=2184"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/tags?post=2184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}