Geek Answers Handbook

Using SSH keys to verify HTTP users

This is most likely impossible, but I just ask you to check it out ... I'm just here out loud ...

Thus, SSH keys are very useful for entering the server. Use SSH, and your SSH keys increase server security and also simplify the management of multiple servers or other programs with a single SSH key. In addition, by unlocking the key when entering the system, once again you need to enter the password again and again. So, I was wondering ... is there a way to use SSH keys to validate a website? I'm not talking about large public websites, but about small controlled systems that are used by specific users whose OS / browser can be controlled. Is there any way to integrate this? For this, I assume that the private key will need to be transferred over the Internet, so let me say that we use SSL to make this insecure. Is it possible? In an ideal situation, I enter the site and he will seethat my private key matches the public key that is installed, and voilá, I am!

+5
source share
3 answers

He named the client certificate , and you import it into your browser.

+2
source

Technically speaking, SSH keys are a public-key cryptographic scheme, and this is what X.509 certificates do in SSL. So, you need certificates (on the client side, if you want to authenticate the client on the server).

And no, private keys are never transmitted over the network. They are used in certain operations to exchange a session key.

+1
source 
AuthUserFile /home/hafizni/.htpasswd
AuthGroupFile /home/hafizin/.htgroup
AuthName hafizin page
AuthType Basic
require group my-users
-1
source

More articles:


All Articles