infrastructure:ssh
This is an old revision of the document!
SSH
SSH on Windows with smartcard authentication
- Install Kitty http://www.9bis.net/kitty/
- Import the certificate
- Run kageant.exe
- Right click kageant tray icon
- Add certificate
- Choose certificate
- Login using smartcard authentication
- Ensure that kageant.exe is still running in the system tray
- Run Kitty
- Connection | SSH | Auth | [x] Attempt authencation using Pageant
- Optionally disable “Attempt keyboard-interactive auth (SSH-2)” to prevent a password login and force the smartcard use
- Optionally enable “Allow agent forwarding” to enable further logins via smartcard authentication
Converting X509 certificate to SSH public key
- Export in Windows
- certmgr.msc
- Browse to certificate
- Open certificate (double-click)
- Details
- Export to file
- (*) No, don't export private key
- (*) Base-64 encoded X.509 (.CER)
> openssl x509 -in certificate.cer -pubkey -noout > certificate.pem> ssh-keygen -i -m PKCS8 -f certificate.pem
infrastructure/ssh.1526389038.txt.gz · Last modified: (external edit)