Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
A free and open implementation of the SSH communication security tools.
1
vote
changing defaults when generating new SSH server keys
Run this (as root) instead:
#!/bin/sh
# clean up old keys or complain you're not root
cd /etc/ssh && rm ssh_host_*key* || echo "Run this as root!" >&2 && exit 2
# generate; see https://stribika.g …
4
votes
Accepted
Consequences of .ssh/authorized_keys being world-readable
Debian had to create the openssh-blacklist package as a short-term solution to ensure the weak keys could be weeded out. …
1
vote
Cannot use "ecdsa" and "rsa" in parallel when using SFTP
SSH (ssh and other programs that run it, such as scp and sftp) stores its keys in ~/.ssh/known_hosts by default. It identifies hosts by their keys.
In this case, you presumably have one of those keys …
300
votes
Accepted
What are ssh-keygen best practices?
The OpenSSH defaults are safe to trust. … default ("first-preference") in OpenSSH 8.5 (2021-03-03). …
4
votes
Accepted
Best practices for securing SSH access? Is certificate-based VPN server a good solution?
OpenSSH is rather secure out of the box. The risk of suffering exploits, especially if you regularly update it, is quite low. I consider it more secure than even the best VPN servers. … I believe OpenSSH also supports certificates, but I suggest ED25519 keys instead.
For a higher level of security, you can also set up 2FA. …