Skena ukhiye we-SSH ngokusebenzisa i-proxy relay ekhona

Qoqa okhiye be-host abangaba khona ngokusebenzisa i-TCP relay yasendaweni ngenkathi ugcina umehluko phakathi kwelebula ye-relay ne-SSH host yangempela.

I-ssh-keyscan ayikwamukeli ukukhetha kwe-ProxyCommand ye-SSH. Ngakho-ke i-proxy elungiselelwe i-ssh ayilungiseleli isihloli esihlukile ngokuzenzakalela.

Isixazululo esisodwa i-TCP relay yasendaweni esivele isungulwe, eqeda ukuqinisekiswa kwe-proxy nokushintshana kwe-CONNECT okudingekayo, bese iveza ukuhamba kwamabhayithi kuseva ye-SSH ehlosiwe. Uma ley relay ilalela ku-127.0.0.1:2222:

ssh-keyscan -p 2222 127.0.0.1 > candidate.keys
ssh-keygen -lf candidate.keys

Umyalo wokuqala uqoqa okhiye abangaba khona; owesibili ubonisa izigxivizo zeminwe zawo. I-relay kufanele idlulise ukuhamba kwe-SSH ngemva kokusebenzisa impendulo ephelele ye-proxy, esikhundleni sokunikeza izihloko ze-HTTP esihlolini.

Ilebula ye-host ekukhishweni ichaza indawo yokugcina yasekhaya ye-relay. Ungayifaki ngaphandle koshintsho futhi ungacabangi ukuthi manje isihlonza igama le-SFTP host elikude.

Qinisekisa isigxivizo somunwe ngerekhodi ethembekile noma umqondisi ngaphambi kokuhlobanisa ukhiye ne-host yangempela kanye nechweba ku-known_hosts. I-ssh-keyscan iqoqa lokho okwethulwa indawo yokugcina efinyelelekayo; ukuxhumana kwe-proxy okuphumelelayo akukuqinisekisi lowo khiye.

Izihloko ezihlobene