简体   繁体   English

如何向Aptible提供SSH证书和私钥

[英]How to provide an SSH certificate and private key to Aptible

I'm trying out a HIPAA-compliant PaaS, Aptible , by following their Django Quickstart Guide . 我正在按照其Django快速入门指南 试用符合HIPAA的PaaS, Aptible I've used the aptible CLI to follow the Create an App and Provision a Database steps, but I'm running into trouble at Add a Dockerfile . 我已经使用了aptible CLI来执行“ 创建应用配置数据库”的步骤,但是在添加Dockerfile时遇到了麻烦

This step says to add a Dockerfile at the root of the repository, but no repository has been created yet by the previous steps. 该步骤说要在存储库的根目录中添加一个Dockerfile ,但之前的步骤尚未创建任何存储库。 I assume I have to clone the repository using the Git remote link generated in 'Create an App'. 我假设我必须使用“创建应用程序”中生成的Git远程链接来克隆存储库。 However, if I do this (and ignore the warning about the authenticity of the host), I get a Please make sure you have the right access rights and the repository exists : 但是,如果执行此操作(并忽略有关主机真实性的警告), Please make sure you have the right access rights and the repository exists收到“ Please make sure you have the right access rights and the repository exists

Kurts-MacBook-Pro:Scratch kurtpeek$ git clone git@beta.aptible.com:lucy/test_app.git
Cloning into 'test_app'...
The authenticity of host 'beta.aptible.com (52.21.95.179)' can't be established.
ECDSA key fingerprint is SHA256:FsLUs5U/cZ0nGgvy/OorvGSaLzvLRSAo4+xk6+jNg8k.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'beta.aptible.com,52.21.95.179' (ECDSA) to the list of known hosts.
Connection closed by 52.21.95.179 port 22
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

Based on Aptible's FAQ, https://www.aptible.com/documentation/enclave/troubleshooting/permission-denied-git-push.html , I inferred that I hadn't yet registered my SSH Public Key with Enclave. 根据Aptible的常见问题解答( https://www.aptible.com/documentation/enclave/troubleshooting/permission-denied-git-push.html) ,我推断我尚未在Enclave注册SSH公钥。

Indeed if I go to Aptible's Dashboard and click 'Certificates', I see that I don't have any yet. 的确,如果我转到Aptible的仪表板并单击“证书”,我会发现我还没有任何证书。 If I then click 'Upload Certificate' I get to the following menu: 如果然后单击“上传证书”,则进入以下菜单:

在此处输入图片说明

This is probably quite a general SSH question, but I'm unsure how to proceed here. 这可能是一个相当普遍的SSH问题,但是我不确定如何继续进行。 I've tried the ssh-keygen command as follows: 我已经尝试过ssh-keygen命令,如下所示:

Kurts-MacBook-Pro:~ kurtpeek$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/Users/kurtpeek/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /Users/kurtpeek/.ssh/id_rsa.
Your public key has been saved in /Users/kurtpeek/.ssh/id_rsa.pub.

It would seem that the id_rsa thus generated corresponds to the Private Key requested. 这似乎是在id_rsa由此产生对应于所要求的私钥 However, where can I find the (corresponding) Certificate ? 但是,在哪里可以找到(对应的) 证书

(I perused https://support.ssh.com/manuals/server-admin/64/userauth-cert.html but couldn't find an answer). (我细读了https://support.ssh.com/manuals/server-admin/64/userauth-cert.html,但找不到答案)。

It turns out that in order to follow the Django Quickstart Guide, it suffices to provide an SSH key (not a certificate). 事实证明,为了遵循Django快速入门指南,只需提供SSH密钥(而不是证书)即可。 This can be entered by clicking your name in the upper right hand corner of the dashboard, selecting "SSH keys", and copy-pasting the contents of your ~/.ssh/id_rsa.pub in the form. 可以通过以下方式输入:单击仪表板右上角的名称,选择“ SSH密钥”,然后将~/.ssh/id_rsa.pub的内容粘贴到表单中。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM