来自 OSX 的 AWS SSH 连接不断询问 SSH 密钥的密码

Question

根据 Ben 的回答，我创建了一个密钥对，将私钥下载到 ~/.ssh 中，将权限更改为 600 并尝试对实例进行 ssh ...但出现未经授权的错误：

    $ ssh -v -i  ~/.ssh/aws-erwin16.pem jack@ec2-nn-nn-nnn-nnn.us-west-2.compute.amazonaws.com
    OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011
    debug1: Reading configuration data /Users/jack/.ssh/config
    debug1: Reading configuration data /etc/ssh_config
    debug1: /etc/ssh_config line 20: Applying options for *
    debug1: Connecting to ec2-nn-nn-nnn-nnn.us-west-2.compute.amazonaws.com [54.69.113.179] port 22.
    debug1: Connection established.
    debug1: identity file /Users/jack/.ssh/aws-erwin16.pem type -1
    debug1: identity file /Users/jack/.ssh/aws-erwin16.pem-cert type -1
    debug1: Enabling compatibility mode for protocol 2.0
    debug1: Local version string SSH-2.0-OpenSSH_6.2
    debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
    debug1: match: OpenSSH_6.6.1p1 Ubuntu-2ubuntu2 pat OpenSSH*
    debug1: SSH2_MSG_KEXINIT sent
    debug1: SSH2_MSG_KEXINIT received
    debug1: kex: server->client aes128-ctr hmac-md5-etm@openssh.com none
    debug1: kex: client->server aes128-ctr hmac-md5-etm@openssh.com none
    debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
    debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
    debug1: Server host key: RSA 85:e4:69:56:21:4d:32:1c:e9:5c:83:a5:cc:28:03:39
    debug1: Host 'ec2-nn-nn-nnn-nnn.us-west-2.compute.amazonaws.com' is known and matches the RSA host key.
    debug1: Found key in /Users/jack/.ssh/known_hosts:22
    debug1: ssh_rsa_verify: signature correct
    debug1: SSH2_MSG_NEWKEYS sent
    debug1: expecting SSH2_MSG_NEWKEYS
    debug1: SSH2_MSG_NEWKEYS received
    debug1: Roaming not allowed by server
    debug1: SSH2_MSG_SERVICE_REQUEST sent
    debug1: SSH2_MSG_SERVICE_ACCEPT received
    debug1: Authentications that can continue: publickey
    debug1: Next authentication method: publickey
    debug1: Offering RSA public key: /Users/jack/.ssh/id_rsa
    debug1: Authentications that can continue: publickey
    debug1: Trying private key: /Users/jack/.ssh/aws-erwin16.pem
    debug1: read PEM private key done: type RSA
    debug1: Authentications that can continue: publickey
    debug1: No more authentication methods to try.
    Permission denied (publickey).

如果我更改了 ubuntu 的用户名，并且它运行良好... get connecte d..;

Answer 1

您将X.509 Certificates 与Amazon EC2 Keypairs 混淆了。 EC2 密钥对用于登录 EC2 实例。

在 EC2 控制台中，找到左侧的密钥对部分，生成密钥对，并将私钥本地保存到您的磁盘。 OpenSSH 默认搜索~/.ssh 目录。运行chmod 600 ~/.ssh/<filename> 设置正确的权限。然后，您可以使用该密钥通过 SSH 访问您的实例。