Why does my OpenSSH key fingerprint not match the AWS EC2 console keypair fingerprint?

AWS EC2 shows the SSH2 fingerprint, not the OpenSSH fingerprint everyone expects. It doesn’t say this in the UI. It also shows two completely different kinds of fingerprints depending on whether the key was generated on AWS and downloaded, or whether you uploaded your own public key. Fingerprints generated with ssh-keygen -l -f id_rsa will … Read more

SFTP logging: is there a way?

OpenSSH versions 4.4p1 and up (which should include the latest version with CentOS 5) have SFTP logging capability built in – you just need to configure it. Find this in your sshd_config (in centos, file /etc/ssh/sshd_config): Subsystem sftp /usr/libexec/openssh/sftp-server and change it to: Subsystem sftp /usr/libexec/openssh/sftp-server -l INFO INFO is just one level of detail … Read more

SSH Suddenly returning Invalid format

Check the contents of key_name, if the agent says invalid format, then there’s something wrong with the key – like .. are you sure that’s the correct key? Even if it’s not the private key you need, the ssh agent won’t return invalid format if the key is working, you simply won’t be able to … Read more

What significance does the user/host at the end of an SSH public key file hold?

This field is a comment, and can be changed or ignored at will. It is set to user@host by default by ssh-keygen. The OpenSSH sshd(8) man page describes the format of a public key thus: Public keys consist of the following space-separated fields: options, keytype, base64-encoded key, comment. . . . The comment field is … Read more

OpenSSH: Difference between internal-sftp and sftp-server

Both sftp-server and internal-sftp are part of OpenSSH. The sftp-server is a standalone binary. The internal-sftp is just a configuration keyword that tells sshd to use the SFTP server code built-into the sshd, instead of running another process (what would typically be the sftp-server). The internal-sftp was added much later (OpenSSH 4.9p1 in 2008?) than … Read more