Xfce Wiki

Sub domains
 

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Next revisionBoth sides next revision
contribute:dev:get-a-contributor-account [2014/03/06 11:53] – [Generating a SSH key] nickcontribute:dev:get-a-contributor-account [2014/11/25 12:43] – [Apply for an account] nick
Line 12: Line 12:
 ===== SSH ===== ===== SSH =====
  
-For a secure connection to push Git commits, the Xfce project uses SSH keys to authorize on the server. This has the advantage a secure connection is established between the server with simple passwords ((referring to the paraphrase used to unlock the ssh key on your local machine)).+For a secure connection to push Git commits, the Xfce project uses SSH keys to authorize on the server.
  
 ==== Generating a SSH key ==== ==== Generating a SSH key ====
Line 20: Line 20:
 SSH keys are stored in your home directory in the ''~/.ssh'' directory. To generate a key pair use the following command: SSH keys are stored in your home directory in the ''~/.ssh'' directory. To generate a key pair use the following command:
  
-  ssh-keygen -t rsa+  ssh-keygen -b 4096 -t rsa
  
-or +<note important>The Xfce servers support the types RSA, DSA and ECDSA. For RSA/DSA use sufficient bits like 2048 or 4096.</note>
- +
-  ssh-keygen -t dsa+
      
 When the command asks for the //passphrase// it is advised to set a relatively simple password. This password is used to unlock the key when you use it. For more information on how to create a pair of SSH keys, please refer to a [[http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen|SSH documentation]] or book. When the command asks for the //passphrase// it is advised to set a relatively simple password. This password is used to unlock the key when you use it. For more information on how to create a pair of SSH keys, please refer to a [[http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen|SSH documentation]] or book.
 +
 +<note info>
 +Using a key without a passphrase is basically the same as writing down that random password. Anyone who gains access to your computer has gained access to every system you use that key with. The solution is to add a passphrase to the SSH key, for an extra layer of security.
 +
 +See also: [[xfce:xfce4-session:advanced#ssh_and_gpg_agents|How to work with ssh-agent]].
 +</note>
  
 Now that you are finished generating your key pair, you will have two files: a private key and a public key. If you have accepted the default filename, they will be respectively $HOME/.ssh/id_dsa and $HOME/.ssh/id_dsa.pub or $HOME/.ssh/id_rsa and $HOME/.ssh/id_rsa.pub, depending on the type of key you have specified. Now that you are finished generating your key pair, you will have two files: a private key and a public key. If you have accepted the default filename, they will be respectively $HOME/.ssh/id_dsa and $HOME/.ssh/id_dsa.pub or $HOME/.ssh/id_rsa and $HOME/.ssh/id_rsa.pub, depending on the type of key you have specified.
Line 33: Line 37:
  
 The public key can be published and shall be sent when you are applying for an Xfce GIT account.  The public key can be published and shall be sent when you are applying for an Xfce GIT account. 
 +
 +===== Apply for an account =====
 +
 +Now you are ready to apply for for an Xfce contributor account. When you register, you will need to enter your name and an e-mail address, which has to be your own. Of course, do not forget that this __email address becomes public__ (at least through Git) so you will unfortunately get some spam as a result.
 +
 +
 +  - Send a mail to [[accounts@xfce.org]] containing the following information:
 +    - Your full name
 +    - Permanent email address
 +    - Requested account name ((lowercase letters a-z, the name should also be easily connectable to the full name, try to avoid nick-names))
 +    - Explanation why you think you should get an account (in English please)
 +    - Attach (do not paste inline!) the public part of your passphrase protected SSH version 2 key pair (usually ''~/.ssh/id_rsa.pub'' or ''~/.ssh/id_dsa.pub''). Only attach one key, you can add more keys later [[contribute:dev:git:start#adding_and_removing_private_keys|yourself]].
 +  - The sysadmin with reply to the email (this might take a couple of days).
 +
 +
 +
 +