Notes:
- In the near future, OpenSSH is deprecating support for DSA keys.
- Minimum supported RSA key size will be 1024 bits, but you should really do 2048 or larger.
Typical steps for creating SSH keys:
$ mkdir ~/.ssh
$ chmod 700 ~/.ssh
$ cd ~/.ssh
$ ssh-keygen.exe -t rsa -b 3200 -C 'Borg backup key thomast61p July 2015' -N '' -f ~/.ssh/ssh-borg-backup-july2015
In this particular case, I am creating a RSA/3200 key with no password (-N '') and with a comment indicating that it will only be used for Borg backups. Because the key has no password, I should only use it in conjunction with the borg backup command on a separate server-side account that has very limited permissions on the server.
No comments:
Post a Comment