Skip to content

Commit

Permalink
WIP : resolving Issue #312, #317, #318
Browse files Browse the repository at this point in the history
  • Loading branch information
Raphux committed Apr 24, 2020
1 parent c3279b1 commit 1fc7704
Show file tree
Hide file tree
Showing 3 changed files with 85 additions and 2 deletions.
73 changes: 73 additions & 0 deletions docs/advanced-usage/change_password_on_every_connection.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,73 @@
Generate private keys
=============================

Change password on every connection :
--------------------------------------

For security purpose, you can configure PaSSHport to change the password of the user@target you just connected to. This can NOT be set per target, if you set this, the password we'll be change for *all* targets.

To do this, edit the *passhportd.ini* file (``/etc/passhport/passhportd.ini``), and set the parameter : :


To generate the public key (extract from the along side generated private key) that you'll give to your PaSSHport admin, use `puttygen` that you can download from `here <https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html>`__ (search for `puttygen.exe`).


Start puttygen, and on the main windows, select the type of key you want to generate (`1`), the key length (`2`), then click `Generate` button (`3`). Here, we selected RSA and a key length of 4096 (2048 is a considered as a minimum for RSA) :

.. image:: images/doc-passhport-puttygen-0.png

Move your mouse in the blank space, until the key is generated :

.. image:: images/doc-passhport-puttygen-1.png

Once generated, insert a comment (`1`), a strong passphrase (`2`), then save your private key (`3`).

.. image:: images/doc-passhport-puttygen-2.png

You now have to send your RSA public key to your PaSSHport admin. Select your public key as shown in this screen capture, and copy/paste it into a mail to your PaSSHport admin :

.. image:: images/doc-passhport-puttygen-3.png

You now have to wait until your PaSSHport admin add your key to your account into PaSSHport.

On Linux / Unix :
-------------------

Simply open a terminal, and use the `ssh-keygen` command. Here we generate à 4096bits length RSA key :

.. code-block:: none
user@host:~$ ssh-keygen -t rsa -b 4096
Generating public/private rsa key pair.
Enter file in which to save the key (/home/user/.ssh/id_rsa):
Created directory '/home/user/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/user/.ssh/id_rsa.
Your public key has been saved in /home/user/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:1r28XcYMIclivAHSSqmzH5Dh1LJ+IMsQMhl2Ds1HtXQ user@passhport-debian9-dev
The key's randomart image is:
+---[RSA 4096]----+
|.=o..oo=.E |
|* +o+.=.+o . . |
|.o +.B o = + . |
|. . O . o = . . |
| o + = S o . . |
| o o o. . . + |
| o . o =|
| . o o |
| . . |
+----[SHA256]-----+
user@host:~$
Display your newly created public key :

.. code-block:: none
user@host:~$ cat .ssh/id_rsa.pub
ssh-rsa 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 user@passhport-debian9-dev
user@host:~$
And send this content to your PaSSHport admin. You now have to wait until your PaSSHport admin add your key to your account into PaSSHport.

10 changes: 10 additions & 0 deletions docs/advanced-usage/index.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
User-side usage
########################################

This chapter shows how to connect to a target, through PaSSHport, from key generation, to SCP.

.. toctree::
:maxdepth: 2

change_password_on_every_connection
get_last_passwords
4 changes: 2 additions & 2 deletions docs/index.rst
Original file line number Diff line number Diff line change
Expand Up @@ -14,8 +14,8 @@ Table of content :
getting-started
passhport-admin/index
user-side-usage/index
.. advanced-usage
api
advanced-usage
.. api
limitations
get-involved
Expand Down

0 comments on commit 1fc7704

Please sign in to comment.