Re: [IBMiOSS] Understanding SSH Key Pairs

[Alan Campin <alan0307d@xxxxxxxxx>]

If you go to YouTube and run a query for Public Key Encryption you will
find some videos. Here are a few.

https://www.youtube.com/watch?v=GSIDS_lvRv4
https://www.youtube.com/watch?v=NmM9HA2MQGI
https://www.youtube.com/watch?v=NF1pwjL9-DE


On Sat, May 25, 2024 at 11:19 PM Arnie Flangehead <
arnie.flangehead@xxxxxxxxx> wrote:

> Hi All
>
> I'm required to switch from FTP to sFTP, and first that means negotiating
> OpenSSH. I want to really understand this, because I don't think the person
> on the server side does and I think one of us should.
>
> I've read a couple of tutorials, but I'm stuck on the concept of public and
> private keys.
>
> In the context of an IBM i being the client (me), and a non-IBM i being the
> server (my client's customer):
>
> Do both parties generate both private and public keys?
> Which party gives his public key to the other? (or do both, or only one,
> but it doesn't matter which?)
> How many keys are there in total? e.g. Do both parties share the same
> public key, with each having his own private key?
> If you generate your private key from the public, what stops a baddy from
> intercepting your public key and doing the same generation then
> impersonating you?
> Do you get a different private key each time you generate from the public
> key? Would this then be invalid for a connection you've used before? e.g.
> If you test with one User Profile then switch to another.
>
> As you can see from these questions, I'm really devoid of basic
> understanding of how this concept is supposed to work. Feel free to answer
> the above questions point by point, or to explain via a short summary or a
> metaphor/analogy if that's easier.
>
> Thanks.
> --
> This is the IBMi Open Source Roundtable (OpenSource) mailing list
> To post a message email: OpenSource@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/opensource
> or email: OpenSource-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/opensource.