У меня есть два ключа в моем .ssh папка, одна id_ed25519 ключ, а другой id_rsa ключ. Если я бегу:
ssh-add ir_ed25519
Я получаю сообщение "Идентификатор добавлен ..." и все в порядке. Если, с другой стороны, я попробую ssh-add id_rsa, он запрашивает кодовую фразу, я нажимаю клавишу ввода, поскольку у меня ее нет (локальный проект), и он возвращает меня в командную строку. Затем сервер отклоняет меня с (public key) error.
РЕДАКТИРОВАТЬ:
user@machine:~/.ssh$ ls
authorized_keys config google_compute_engine google_compute_engine.pub google_compute_known_hosts id_ed25519 id_ed25519.pub id_rsa id_rsa.pub known_hosts
user@machine:~/.ssh$ ssh-add id_ed25519
Identity added: id_ed25519 (my_gitlab_key)
user@machine:~/.ssh$ ssh-add id_rsa
Enter passphrase for id_rsa:
user@machine:~/.ssh$
user@machine:~/.ssh$ ssh -p 27 user@server_URL.com
Enter passphrase for key '/home/user/.ssh/id_rsa':
user@server_URL.com: Permission denied (publickey).
В id_rsa ключ принадлежит серверу.
РЕДАКТИРОВАТЬ 2:
user@computer:~/.ssh$ ssh -p 27 user@server-URL.com -v
OpenSSH_7.6p1 Ubuntu-4ubuntu0.3, OpenSSL 1.0.2n 7 Dec 2017
debug1: Reading configuration data /home/user/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to server-URL.com [xxxxxxxxxx] port 27.
debug1: Connection established.
debug1: identity file /home/user/.ssh/id_rsa type 0
debug1: key_load_public: No such file or directory
debug1: identity file /home/user/.ssh/id_rsa-cert type -1
debug1: identity file /home/user/.ssh/id_ed25519 type 3
debug1: key_load_public: No such file or directory
debug1: identity file /home/user/.ssh/id_ed25519-cert type -1
debug1: identity file /home/user/.ssh/google_compute_engine type 0
debug1: key_load_public: No such file or directory
debug1: identity file /home/user/.ssh/google_compute_engine-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.4p1 Debian-10+deb9u6
debug1: match: OpenSSH_7.4p1 Debian-10+deb9u6 pat OpenSSH* compat 0x04000000
debug1: Authenticating to server-URL.com:27 as 'user'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:WCIqCPH...5A3dmWlf01g0m6k
debug1: Host '[server-URL.com]:27' is known and matches the ECDSA host key.
debug1: Found key in /home/user/.ssh/known_hosts:1
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: ED25519 SHA256:HhRHqmr47/f0Lw+U3a+/a85ydnFvbns3KiQhKZbQC1Y /home/user/.ssh/id_ed25519
debug1: Authentications that can continue: publickey
debug1: Offering public key: RSA SHA256:D+NWN6yffzHS...s6JiUWVjEU /home/user/.ssh/id_rsa
debug1: Server accepts key: pkalg ssh-rsa blen 279
Enter passphrase for key '/home/user/.ssh/id_rsa':
debug1: Offering public key: RSA SHA256:iUFi29EEETE...Sv1Q6dhypY2o /home/user/.ssh/google_compute_engine
debug1: Authentications that can continue: publickey
debug1: No more authentication methods to try.
user@server-URL.com: Permission denied (publickey).
Он не будет запрашивать «Введите кодовую фразу для ключа», если «id_rsa» не был зашифрован. У него есть кодовая фраза ... не нажимайте просто Enter.
Вы можете проверить это с помощью ssh-keygen команда. Например, чтобы изменить кодовую фразу, используйте эту команду:
ssh-keygen -p -f ~/.ssh/filenamehere
Если кодовая фраза уже существует, она запросит старую, а после ее ввода - новую:
$ ssh-keygen -p -f ~/.ssh/filenamehere
Enter old passphrase:
Key has comment 'examplecomment'
Enter new passphrase (empty for no passphrase):
Если нет, он запросит только новый:
$ ssh-keygen -p -~/.ssh/filenamehere
Key has comment 'examplecomment'
Enter new passphrase (empty for no passphrase):