0

We access our ubuntu server from outside over ssh this way : 

ssh -i securityTier.pem -l someUsername serverDnsName

I need to create new user which will use separate *.pem file. So far i created :

sudo useradd new-user
sudo - su new-user
ssh-keygen

so new-user have default keys : ~/.ssh/id_rsa and id_rsa.pub

and i wonder how i can generate from user`s ssh private key pem file ? What's correct way in openssl to generate *.pem file for given user ?

martin85
  • 115
  • 1
  • 7
  • OpenSSH private keys ARE [PEM encoded](http://en.wikipedia.org/wiki/Privacy_Enhanced_Mail) by default. They simply don't have the extension `.pem`. – Zoredache May 08 '13 at 22:01

1 Answers1

2

The .pem file is simply the same as the ~/.ssh/id_rsa file, just with a different extension. It can be used in the same way as the securityTier.pem file you're using with ssh -i.

It is the private key for that user.

Here's an article which explains the process quite well: http://www.cyberciti.biz/faq/force-ssh-client-to-use-given-private-key-identity-file/

Ellis Percival
  • 1,992
  • 1
  • 11
  • 5