Slide 1

Slide 1 text

ࢦ໲ೝূͰ SSHϩάΠϯ ҪᖒΏ͖Έͭ 2022೥12݄17೔ Kanazawa.rb meetup #124

Slide 2

Slide 2 text

ࣗݾ঺հ ➤ YouTuber ➤ My Outdoor Life (https://kanazawa.camp/) ➤ ത࢜(৘ใՊֶ) ➤ ΠϯλʔωοτΛ࢖ͬͨૄ݁߹෼ࢄγεςϜͷݚڀΛ͍ͯ͠·͢ ➤ גࣜձࣾΫϧ΢Οοτ औక໾COO ݉ ๺཮ࢧࣾ௕ ➤ Code for Kanazawa ཧࣄ ➤ ిࢠ޻࡞ͱφΠϑΛࣗ࡞͢Δͷ͕झຯͰ͢

Slide 3

Slide 3 text

YUBI KEYͱ͸ ➤ ೝূσόΠεͷҰछ ➤ ଟཁૉೝূͷͻͱͭͱͯ͠ར༻Մೳ ➤ ରԠϓϩτίϧ΋ଟ༷ ➤ FIDO2, U2F, PIV, OpenPGP , HOTP , TOTP , Yubico OTP

Slide 4

Slide 4 text

YUBIKEY BIOͱ͸ ➤ ରԠϓϩτίϧ ➤ FIDO U2F, FIDO2/WebAuthn(͏͐Ϳ͓ʔ͢Μ) ➤ ࢦ໲ೝূϢχοτ͖ͭ

Slide 5

Slide 5 text

ॳظηοτΞοϓ(WEB͔ͭ͏ฤ) ➤ yubico.com/setup/yubikey-bio-series/

Slide 6

Slide 6 text

No content

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

No content

Slide 9

Slide 9 text

No content

Slide 10

Slide 10 text

No content

Slide 11

Slide 11 text

No content

Slide 12

Slide 12 text

➤ PINͱࢦ໲Λొ࿥Ͱ͖ͨ

Slide 13

Slide 13 text

SSHʹ͍ͭͯ ➤ OpenSSH8.2͔ΒFIDO/U2FʹରԠ ➤ ൿີ伴͕࿙Ӯͯ͠΋YubiKey͕ͳ͍ͱsshͰ͖ͳ͍ ➤ ཁૉ ➤ YubiKeyσόΠε ➤ ࢦ໲ ➤ ύεϑϨʔζ

Slide 14

Slide 14 text

SSHͷ伴ੜ੒Yukimitsu-no-iMac: izawa % ssh-keygen -t ed25519-sk Generating public/private ed25519-sk key pair. You may need to touch your authenticator to authorize key generation. Enter file in which to save the key (/Users/izawa/.ssh/id_ed25519_sk): ./abc Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in ./abc Your public key has been saved in ./abc.pub The key fingerprint is: SHA256:i6VKPEtPlunUwt4v8DnVzITGtoYyOobrZYe+2a9mbzQ izawa@Yukimitsu-no-iMac.local The key's randomart image is: +[ED25519-SK 256]-+ | | | | | . . | | = . | | S+ * | | . o+BE.+ + | | .O.%*o= | | .*+#oo* | | .oo*=*=++. | +----[SHA256]-----+ ~/Dropbox/勉強会資料 Yukimitsu-no-iMac: izawa % ls abc* abc abc.pub ύεϑϨʔζೖྗ

Slide 15

Slide 15 text

ϩάΠϯͯ͠ΈΔ ➤ ࣄલʹର৅αʔόͷauthorized_keysʹ௥Ճ͓ͯ͘͠ % ssh ssh-server.clwit.co.jp Confirm user presence for key ED25519-SK SHA256:e7hxJuLIsnTYF+OA7E1cidd(略 User presence confirmed Last login: Mon Dec 5 13:02:12 2022 from 100.100.88.170 izawa@ssh-server:~$ ͜͜Ͱࢦ໲ΛεΩϟϯ

Slide 16

Slide 16 text

YKMAN ίϚϯυʹ͍ͭͯ ➤ brewͰinstallͰ͖ΔYubiKeyૢ࡞༻ͷCLIίϚϯυ ➤ ࢦ໲ͷ௥Ճ΍ɺPINͷมߋͷ΄͔ɺYubiKeyશൠʹؔ͢Δૢ࡞͕Մೳ

Slide 17

Slide 17 text

·ͱΊ ➤ ଟཁૉೝূ༻ͷσόΠε΋͍Ζ͍Ζग़͍ͯ·͢ ➤ GitHub΋gitίϚϯυ Ͱ ssh ΞΫηε͢Δ৔߹ʹηΩϡϦςΟʔΩʔ͕࢖͑ΔΑ͏ʹ ͳΓ·ͨ͠ ➤ ௿ίετͰࢼͯ͠ΈΔ͜ͱ͕Ͱ͖ΔͷͰɺ༡ΜͰΈΔͱྑ͍͔΋͠Ε·ͤΜ