*Sur le serveur :

 ssh-keygen -t dsa -f micheldupont



cat micheldupont.pub >> ~/.ssh.authorized_keys



mv micheldupont id_dsa

mv micheldupont.pub id_dsa.pub



#envoi au client des cles (ou par client mail classique, scp, ...etc):

cat id_dsa |mail -s "cle privee" micheldupont@domain.com

cat id_dsa.pub |mail -s "cle publique" micheldupont@domain.com



rm -fv id_dsa id_dsa.pub

# (on ne garde jamais les clés des deux cotés !!!)



*Sur le client (qui a recu le mail micheldupont@domain.com) :

(attention à bien copier les clés pub/priv sans oublier de lignes ...)



mv id_dsa.pub ~/.ssh/

mv id_dsa ~/.ssh/

ls -lah

total 8

-rw------- 1 root root 668 mai 19 18:44 id_dsa

-rw-r--r-- 1 root root 604 mai 19 18:44 id_dsa.pub

-rw-r--r-- 1 root root   0 mai 19 18:20 known_hosts



[root@srvtest1 .ssh]# ssh -p 27455 192.168.1.111

The authenticity of host '192.168.1.111 (192.168.1.111)' can't be established

.

RSA key fingerprint is f4:eb:39:39:c1:c3:55:1d:f8:2a:dd:13:60:e1:3d:07.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added '192.168.1.111' (RSA) to the list of known hosts.

root@192.168.1.111's password:

Last login: Mon May 19 14:26:20 2008 from 192.168.2.216

[root@SRV-SSH ~]#