Linux服务器设置SSH登陆

[exchange@localhost ~]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/exchange/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /home/exchange/.ssh/id_rsa.
Your public key has been saved in /home/exchange/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:HwO0jv+tPpO9vfNkGk5qsnWw67UhtdlAB4zqKy3X1Jk exchange@localhost.localdomain
The key's randomart image is:
+---[RSA 2048]----+
|        .    o.  |
|       . .  . .. |
|        o  .  . .|
|       o ..  . . |
|      . S.o ..oo |
|       . ..o.+E= |
|        ...*+ O +|
|        o.Oo+X.B |
|         ==O*.*+.|
+----[SHA256]-----+

再打开

[exchange@localhost ~]$ cd ～/.ssh
[exchange@localhost .ssh]$ ls
authorized_keys  id_rsa  id_rsa.pub
[exchange@localhost .ssh]$ ll
total 12
-rw-------. 1 exchange exchange  747 9月  11 18:17 authorized_keys
-rw-------. 1 exchange exchange 1679 9月  18 20:46 id_rsa
-rw-r--r--. 1 exchange exchange  412 9月  18 20:46 id_rsa.pub

这里有两种做法
1.将服务器公钥导入到 authorized_keys 中，将私钥下载到客户端，通过工具连接。

[exchange@localhost .ssh]$ cat id_rsa.pub >> authorized_keys

把 id_rsa 下载下来
2.电脑端生成 ssh-key，将公钥发给管理员加到 authorized_keys 文件中。

上述两种方法都可以
修改权限

[exchange@localhost .ssh]$ chmod 600 authorized_keys 
[exchange@localhost .ssh]$ chmod 700 ~/.ssh

#修改SSH配置
[exchange@localhost .ssh]$ sudo vim /etc/ssh/sshd_config 
主要是以下三个：
RSAAuthentication yes    # 启用 RSA 认证
PubkeyAuthentication yes    # 启用公钥认证
PermitRootLogin yes    # 允许root用户ssh登陆
最后重启SSH服务
[exchange@localhost .ssh]$ service sshd restart

保存之后就可以用ssh 直接登陆了，特别是电脑装的linux系统，用ssh命令不用输入密码，很方便。windows下的ssh 客户端很多，可能感觉不出来这种方式的便捷。