Differences

This shows you the differences between two versions of the page.

--- using_openssh_keys_with_openvms_secure_shell_servers [2019/11/26 19:21] – [Workarounds] sgriggs
+++ using_openssh_keys_with_openvms_secure_shell_servers [2019/11/26 19:26] – [Using OpenSSH Public Keys on OpenVMS Systems] sgriggs
@@ Line 52: / Line 52: @@
 That will free you from having to type out all the options every time. Additionally, you can remove the "Host" line and just put those options at the top of your config file and thus that would change your default configuration.
+==== Using OpenSSH Public Keys on OpenVMS Systems ====
+You can use OpenSSH keys on VMS systems, but there are some gotchas. First off, you need to be using RSA keys. DSA keys don't always work depending on the version of VMS you happen to be dealing with. The procedure goes something like this:
+  - On the Linux/Unix side run **ssh-keygen -t rsa** then answer the prompts. You'll notice the default place to save the keys is $HOME/.ssh
+  - Now convert the public key to RFC4716 format for OpenVMS to use. **ssh-keygen -e -f id_rsa.pub | tee mykey.pub**
+  - Copy the file to your VMS system and put it in the .SSH sub-directory of your home-directory on VMS.
+  - On the VMS server edit or create a file called AUTHORIZATION under you .SSH sub-directory in your home-directory. Add a line to the file that specifies your key file like this "KEY mykey.pub" (or whatever the file name actually is for your key).
+  - make sure the permissions on your key file and AUTHORIZATION file are strict enough, otherwise the server will reject your changes. Something like this usually works: **SET FILE /PROTECTION=(S:WRED,O:WRED,G:RE,W:R) [.SSH2]mykey.pub**