Login with $ sudo ssh -i /path/to/my-certificate.pem file on your computer read-only sudo chmod 400 my-certificate.pem Upload the public certificate to to server: ssh-copy-id -i ~/my-certificate.pub Make.

You will get two files generated, one will be my-certificate and one will be my-certificate.pub, rename the my-certificate to my-certificate.pem, so you will have two files, my-certificate.pub and my-certificate.pem.Generate the key with $ ssh-keygen -t rsa -b 2048 -v and when asked to enter file in which to save the key, type my-certificate and when asked to enter passphrase, press Enter (empty passphrase) and confirm by Enter.Step by step from generating key to login: When we open this SubjectPublicKeyInfo -formatted RSA public key file in an ASN. When you get asked:Įnter file in which to save the key (/home/user/.ssh/id_rsa):Įnter the name of the. This is the SubjectPublicKeyInfo format, and it’s the format OpenSSL uses by default when generating a public key: openssl genrsa - out private -key.pem 3072 openssl rsa - in private -key.pem -pubout - out public -key.pem. I personally generate the key file using $ ssh-keygen -t rsa -b 2048 -v, which generates the. pub file:Įxample: # ssh-copy-id -i ~/my-certificate.pub this it should be working and you should be able to login using: $ sudo ssh -i ~/my-certificate.pem are made in file ~/.ssh/authorized_keys on server machine, open with text editor such as nano, you will see lines starting with something like: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAX. For Windows users: Note that ssh-keygen.exe is now built-in in Windows 10. ssh-keygen -p -f file -m pem -P passphrase -N passphrase (if the key is not encrypted with a passphrase, use '' instead of passphrase). First you need to upload public key to the server you are willing to connect to, public key is in. If you are stuck with an older version of Paramiko, you can use ssh-keygen to convert the key to the classic OpenSSH format.

Ssh pem format