Public key authentication for passwordless SCP operation

The SCP/SFTP protocol we use to allow file uploads has the option to authenticate passwordlessly using public/private keys. This enhances security, and is especially useful in automated recurrent synchronizations, as it removes the need for interactive password prompts.

Setup instructions

1. Generate a key pair

We recommend generating a new key pair, although it is possible to use an existing key. We prefer an RSA key of a sufficient length.

Rename your public key to key.pub. Store your private key safely.

on Windows

The PuTTY package contains PuTTYgen, which allows you to generate a new key pair.

on *nix

ssh-keygen -t rsa -b 2048

2. Upload your key.pub to /ssh

If you use a graphical SFTP client, login using the provided username and password (as described here), and you will notice your remote working directory is /strainupload. All files that get uploaded here are presumed to be xml exports, and will be validated and preprocessed. You need to change the remote working directory to /ssh (i.e.: go up a level in the directory structure [..]; there you will see some system directories, the /strainupload directory where you land by default, and also an /ssh dir). Go to /ssh and upload your key.pub there.

Alternatively, if you are familiar with commandline tools, you may use the commandline scp utility to upload your key
scp key.pub <username>@sync.straininfo.com:/strainupload/../ssh

Usage

e.g. syntax for commandline scp, available in most SSH implementations:
scp -o IdentityFile=<path_to_your_private_key> <file_to_upload> <username>@sync.straininfo.net:/strainupload

 
xmlimportpubkey.txt · Last modified: 2011/12/02 13:38 (external edit)