Ssh – How to reuse ssh private key

sshssh-keys

I can connect to server1 and server2 with ssh. Is it possible to connect to server1 from server2 without copy my private key to server2 with open session with server2 from my local machine?

Best Answer

Yes, when you run the SSH authentication agent on your local workstation and then enable forwarding of the authentication agent connection.

Doing so is not completely secure.

From the manual (man ssh):

-A Enables forwarding of the authentication agent connection. This can also be specified on a per-host basis in a configuration file.

Agent forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the agent's UNIX-domain socket) can access the local agent through the forwarded connection. An attacker cannot obtain key material from the agent, however they can perform operations on the keys that enable them to authenticate using the identities loaded into the agent.

A server admin can also disable agent forwarding with the AllowAgentForwarding no option in the sshd_config.