====== SSH ======

  * [[http://mosh.mit.edu/|Mosh]] -- UDP-based replacement for SSH
  * [[mozilla>Security/Guidelines/OpenSSH|OpenSSH Security Guidelines]]
  * [[https://security.stackexchange.com/questions/5096/rsa-vs-dsa-for-ssh-authentication-keys|RSA vs. DSA for SSH authentication keys]]


===== [[http://winscp.net/eng/docs/scripting|WinSCP scripting]] =====

<code>
# Automatically abort script on errors
option batch abort
# Disable overwrite confirmations that conflict with the previous
option confirm off
# Connect
open sftp://user@site.com/ -privatekey="id_rsa.ppk" -rawsettings ProxyMethod=3 ProxyHost=proxy ProxyPort=8080
# Change remote directory
cd /incoming
# Force binary mode transfer
option transfer binary
# Download file to the local directory D:\
get update.csv D:\
</code>



===== Questions answered =====

=== Problems with displaying UTF-8 symbols (pseudographics) ===

<note tip>
If you have problems with displaying UTF-8 symbols with [[http://sshwindows.sourceforge.net/download/|this OpenSSH compilation for Windows]] like [[googlecode>p/conemu-maximus5/issues/detail?id=512#c10|on this screenshot]], then update your client to [[http://www.mls-software.com/opensshd.html|this one]].
</note>


=== How to extract public key from SSH private key file? ===

<note tip>
From [[http://askubuntu.com/questions/53553|How do I retrieve the public key from a SSH private key?]]:

''ssh-keygen -y -f ~/.ssh/id_rsa > ~/.ssh/id_rsa.pub''
</note>


=== How to setup [[wp>two-step verification]] ===

<note tip>
  * [[http://www.debiantutorials.com/secure-ssh-with-two-factor-authentication-using-google-authenticator-on-squeeze/|Secure SSH with Two-Factor Authentication (using Google Authenticator) on squeeze]], [[http://www.linux.com/community/blogs/133-general-linux/783135-securing-ssh-with-two-factor-authentication-using-google-authenticator|Securing SSH with two factor authentication using Google Authenticator]], [[https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-two-factor-authentication|How To Protect SSH With Two-Factor Authentication using libpam-google-authenticator]], [[http://www.howtogeek.com/121650/how-to-secure-ssh-with-google-authenticators-two-factor-authentication/|How to Secure SSH with Google Authenticator’s Two-Factor Authentication]]
    * [[serverfaulta>459541/101556|Whitelist IP from google-authenticator in sshd pam]], [[googlecode>p/google-authenticator/wiki/PamModuleInstructions|PAM Module Instructions]]
    * [[https://github.com/VittGam/google-authenticator/blob/master/FILEFORMAT|~/.google_authenticator file format]]
  * [[https://www.authy.com/integrations/ssh|SSH Two-Factor Authentication with authy-ssh]]
</note>


{{tag>SSH security}}