第 9 章 生成加密密钥对

流程

1. 在 RHUA 节点上，使用 RSA 参数运行 ssh-keygen 命令，并将密钥保存在默认位置。

   警告

   将 passphrase 字段留空。如果您在生成密钥对时提供了密码短语，CDS 安装和注册会失败。

   $ ssh-keygen -t rsa
   Generating public/private rsa key pair.
   Enter file in which to save the key (/home/USER/.ssh/id_rsa):
   Created directory '/home/USER/.ssh'.
   Enter passphrase (empty for no passphrase):
   Enter same passphrase again:
   Your identification has been saved in /home/USER/.ssh/id_rsa.
   Your public key has been saved in /home/USER/.ssh/id_rsa.pub.
   The key fingerprint is:
   e7:97:c7:e2:0e:f9:0e:fc:c4:d7:cb:e5:31:11:92:14 USER@rhua.example.com
   The key's randomart image is:
   +--[ RSA 2048]----+
   |             E.  |
   |            . .  |
   |             o . |
   |              . .|
   |        S .    . |
   |         + o o ..|
   |          * * +oo|
   |           O +..=|
   |           o*  o.|
   +-----------------+

   Copy to Clipboard Toggle word wrap

2. 确认 ~/.ssh/ 目录的权限已设置为 rwx------ 或 700 （数值表示法）。

   $ ls -ld ~/.ssh
   drwx------. 2 USER USER 54 Nov 25 16:56 /home/USER/.ssh/

   Copy to Clipboard Toggle word wrap

3. 将公钥复制到 CDS 和 HAProxy 节点。

   $ ssh-copy-id user@<haproxy1>
   $ ssh-copy-id user@<cds1>
   $ ssh-copy-id user@<cds2>

   Copy to Clipboard Toggle word wrap