Gitlab add ssh key windows

  • What are SSH keys
  • Prerequisites
  • Supported SSH key types

    • ED25519 SSH keys
    • ED25519_SK SSH keys
    • ECDSA_SK SSH keys
    • RSA SSH keys
  • See if you have an existing SSH key pair
  • Generate an SSH key pair

    • Configure SSH to point to a different directory
    • Update your SSH key passphrase
    • Upgrade your RSA key pair to a more secure format
  • Generate an SSH key pair for a FIDO2 hardware security key
  • Generate an SSH key pair with a password manager

    • Generate an SSH key pair with 1Password
  • Add an SSH key to your GitLab account
  • Verify that you can connect
  • Use different keys for different repositories
  • View your account’s SSH keys
  • Use different accounts on a single GitLab instance
  • Configure two-factor authentication (2FA)
  • Use EGit on Eclipse
  • Use SSH on Microsoft Windows
  • Overriding SSH settings on the GitLab server
  • Troubleshooting

    • TLS: server sent certificate containing RSA key larger than 8192 bits
    • Password prompt with git clone
    • Could not resolve hostname error
    • Key enrollment failed: invalid format error

Git is a distributed version control system, which means you can work locally,
then share or push your changes to a server. In this case, the server you push to is GitLab.

GitLab uses the SSH protocol to securely communicate with Git.
When you use SSH keys to authenticate to the GitLab remote server,
you don’t need to supply your username and password each time.

What are SSH keys

SSH uses two keys, a public key and a private key.

  • The public key can be distributed.
  • The private key should be protected.

It is not possible to reveal confidential data by uploading your public key. When you need to copy or upload your SSH public key, make sure you do not accidentally copy or upload your private key instead.

You can use your private key to sign commits,
which makes your use of GitLab and your data even more secure.
This signature then can be verified by anyone using your public key.

For details, see Asymmetric cryptography, also known as public-key cryptography.

Prerequisites

To use SSH to communicate with GitLab, you need:

  • The OpenSSH client, which comes pre-installed on GNU/Linux, macOS, and Windows 10.
  • SSH version 6.5 or later. Earlier versions used an MD5 signature, which is not secure.

To view the version of SSH installed on your system, run ssh -V.

Supported SSH key types

To communicate with GitLab, you can use the following SSH key types:

  • ED25519
  • ED25519_SK (Available in GitLab 14.8 and later.)
  • ECDSA_SK (Available in GitLab 14.8 and later.)
  • RSA
  • DSA (Deprecated in GitLab 11.0.)
  • ECDSA (As noted in Practical Cryptography With Go, the security issues related to DSA also apply to ECDSA.)

Administrators can restrict which keys are permitted and their minimum lengths.

ED25519 SSH keys

The book Practical Cryptography With Go
suggests that ED25519 keys are more secure and performant than RSA keys.

OpenSSH 6.5 introduced ED25519 SSH keys in 2014, and they should be available on most
operating systems.

ED25519_SK SSH keys

To use ED25519_SK SSH keys on GitLab, your local client and GitLab server
must have OpenSSH 8.2 or later installed.

ECDSA_SK SSH keys

To use ECDSA_SK SSH keys on GitLab, your local client and GitLab server
must have OpenSSH 8.2 or later installed.

RSA SSH keys

Maximum RSA key length changed in GitLab 16.3.

Available documentation suggests ED25519 is more secure than RSA.

If you use an RSA key, the US National Institute of Standards and Technology in
Publication 800-57 Part 3 (PDF)
recommends a key size of at least 2048 bits. Due to limitations in Go,
RSA keys cannot exceed 8192 bits.

The default key size depends on your version of ssh-keygen.
Review the man page for your installed ssh-keygen command for details.

See if you have an existing SSH key pair

Before you create a key pair, see if a key pair already exists.

  1. Go to your home directory.
  2. Go to the .ssh/ subdirectory. If the .ssh/ subdirectory doesn’t exist,
    you are either not in the home directory, or you haven’t used ssh before.
    In the latter case, you need to generate an SSH key pair.
  3. See if a file with one of the following formats exists:

    Algorithm Public key Private key
    ED25519 (preferred) id_ed25519.pub id_ed25519
    ED25519_SK id_ed25519_sk.pub id_ed25519_sk
    ECDSA_SK id_ecdsa_sk.pub id_ecdsa_sk
    RSA (at least 2048-bit key size) id_rsa.pub id_rsa
    DSA (deprecated) id_dsa.pub id_dsa
    ECDSA id_ecdsa.pub id_ecdsa

Generate an SSH key pair

If you do not have an existing SSH key pair, generate a new one:

  1. Open a terminal.
  2. Run ssh-keygen -t followed by the key type and an optional comment.
    This comment is included in the .pub file that’s created.
    You may want to use an email address for the comment.

    For example, for ED25519:

    ssh-keygen -t ed25519 -C "<comment>"
    

    For 2048-bit RSA:

    ssh-keygen -t rsa -b 2048 -C "<comment>"
    
  3. Press Enter. Output similar to the following is displayed:

    Generating public/private ed25519 key pair.
    Enter file in which to save the key (/home/user/.ssh/id_ed25519):
    
  4. Accept the suggested filename and directory, unless you are generating a deploy key
    or want to save in a specific directory where you store other keys.

    You can also dedicate the SSH key pair to a specific host.

  5. Specify a passphrase:

    Enter passphrase (empty for no passphrase):
    Enter same passphrase again:
    

    A confirmation is displayed, including information about where your files are stored.

A public and private key are generated. Add the public SSH key to your GitLab account
and keep the private key secure.

Configure SSH to point to a different directory

If you did not save your SSH key pair in the default directory,
configure your SSH client to point to the directory where the private key is stored.

  1. Open a terminal and run this command:

    eval $(ssh-agent -s)
    ssh-add <directory to private SSH key>
    
  2. Save these settings in the ~/.ssh/config file. For example:

    # GitLab.com
    Host gitlab.com
      PreferredAuthentications publickey
      IdentityFile ~/.ssh/gitlab_com_rsa
    
    # Private GitLab instance
    Host gitlab.company.com
      PreferredAuthentications publickey
      IdentityFile ~/.ssh/example_com_rsa
    

For more information on these settings, see the man ssh_config page in the SSH configuration manual.

Public SSH keys must be unique to GitLab because they bind to your account.
Your SSH key is the only identifier you have when you push code with SSH.
It must uniquely map to a single user.

Update your SSH key passphrase

You can update the passphrase for your SSH key:

  1. Open a terminal and run this command:

    ssh-keygen -p -f /path/to/ssh_key
    
  2. At the prompts, enter the passphrase and then press Enter.

Upgrade your RSA key pair to a more secure format

If your version of OpenSSH is between 6.5 and 7.8, you can save your private
RSA SSH keys in a more secure OpenSSH format by opening a terminal and running
this command:

ssh-keygen -o -f ~/.ssh/id_rsa

Alternatively, you can generate a new RSA key with the more secure encryption format with
the following command:

ssh-keygen -o -t rsa -b 4096 -C "<comment>"

Generate an SSH key pair for a FIDO2 hardware security key

To generate ED25519_SK or ECDSA_SK SSH keys, you must use OpenSSH 8.2 or later:

  1. Insert a hardware security key into your computer.
  2. Open a terminal.
  3. Run ssh-keygen -t followed by the key type and an optional comment.
    This comment is included in the .pub file that’s created.
    You may want to use an email address for the comment.

    For example, for ED25519_SK:

    ssh-keygen -t ed25519-sk -C "<comment>"
    

    For ECDSA_SK:

    ssh-keygen -t ecdsa-sk -C "<comment>"
    

    If your security key supports FIDO2 resident keys, you can enable this when
    creating your SSH key:

    ssh-keygen -t ed25519-sk -O resident -C "<comment>"
    

    -O resident indicates that the key should be stored on the FIDO authenticator itself.
    Resident key is easier to import to a new computer because it can be loaded directly
    from the security key by ssh-add -K
    or ssh-keygen -K.

  4. Press Enter. Output similar to the following is displayed:

    Generating public/private ed25519-sk key pair.
    You may need to touch your authenticator to authorize key generation.
    
  5. Touch the button on the hardware security key.

  6. Accept the suggested filename and directory:

    Enter file in which to save the key (/home/user/.ssh/id_ed25519_sk):
    
  7. Specify a passphrase:

    Enter passphrase (empty for no passphrase):
    Enter same passphrase again:
    

    A confirmation is displayed, including information about where your files are stored.

A public and private key are generated.
Add the public SSH key to your GitLab account.

Generate an SSH key pair with a password manager

Generate an SSH key pair with 1Password

You can use 1Password and the 1Password browser extension to either:

  • Automatically generate a new SSH key.
  • Use an existing SSH in your 1Password vault to authenticate with GitLab.
  1. Sign in to GitLab.
  2. On the left sidebar, select your avatar.
  3. Select Edit profile.
  4. On the left sidebar, select SSH Keys.
  5. Select Key, and you should see the 1Password helper appear.
  6. Select the 1Password icon and unlock 1Password.
  7. You can then select Create SSH Key or select an existing SSH key to fill in the public key.
  8. In the Title box, type a description, like Work Laptop or
    Home Workstation.
  9. Optional. Select the Usage type of the key. It can be used either for Authentication or Signing or both. Authentication & Signing is the default value.
  10. Optional. Update Expiration date to modify the default expiration date.
  11. Select Add key.

For more information about using 1Password with SSH keys, see the 1Password documentation.

Add an SSH key to your GitLab account

Version history

  • Suggested default expiration date for keys introduced in GitLab 15.4.
  • Usage types for SSH keys added in GitLab 15.7.

To use SSH with GitLab, copy your public key to your GitLab account:

  1. Copy the contents of your public key file. You can do this manually or use a script.
    For example, to copy an ED25519 key to the clipboard:

    macOS

    tr -d '\n' < ~/.ssh/id_ed25519.pub | pbcopy
    

    Linux (requires the xclip package)

    xclip -sel clip < ~/.ssh/id_ed25519.pub
    

    Git Bash on Windows

    cat ~/.ssh/id_ed25519.pub | clip
    

    Replace id_ed25519.pub with your filename. For example, use id_rsa.pub for RSA.

  2. Sign in to GitLab.
  3. On the left sidebar, select your avatar.
  4. Select Edit profile.
  5. On the left sidebar, select SSH Keys.
  6. Select Add new key.
  7. In the Key box, paste the contents of your public key.
    If you manually copied the key, make sure you copy the entire key,
    which starts with ssh-rsa, ssh-dss, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521,
    ssh-ed25519, sk-ecdsa-sha2-nistp256@openssh.com, or sk-ssh-ed25519@openssh.com, and may end with a comment.
  8. In the Title box, type a description, like Work Laptop or
    Home Workstation.
  9. Optional. Select the Usage type of the key. It can be used either for Authentication or Signing or both. Authentication & Signing is the default value.
  10. Optional. Update Expiration date to modify the default expiration date.
    In:

    • GitLab 13.12 and earlier, the expiration date is informational only. It doesn’t prevent
      you from using the key. Administrators can view expiration dates and use them for
      guidance when deleting keys.
    • GitLab checks all SSH keys at 02:00 AM UTC every day. It emails an expiration notice for all SSH keys that expire on the current date. (Introduced in GitLab 13.11.)
    • GitLab checks all SSH keys at 01:00 AM UTC every day. It emails an expiration notice for all SSH keys that are scheduled to expire seven days from now. (Introduced in GitLab 13.11.)
  11. Select Add key.

Verify that you can connect

Verify that your SSH key was added correctly.

The following commands use the example hostname gitlab.example.com. Replace this example hostname with your GitLab instance’s hostname, for example, git@gitlab.com.

  1. To ensure you’re connecting to the correct server, check the server’s SSH host keys fingerprint. For:
    • GitLab.com, see the SSH host keys fingerprints documentation.
    • GitLab.com or another GitLab instance, see gitlab.example.com/help/instance_configuration#ssh-host-keys-fingerprints where gitlab.example.com is gitlab.com (for
      GitLab.com) or the address of the GitLab instance.
  2. Open a terminal and run this command, replacing gitlab.example.com with your
    GitLab instance URL:

    ssh -T git@gitlab.example.com
    
  3. If this is the first time you connect, you should verify the
    authenticity of the GitLab host. If you see a message like:

    The authenticity of host 'gitlab.example.com (35.231.145.151)' can't be established.
    ECDSA key fingerprint is SHA256:HbW3g8zUjNSksFbqTiUWPWg2Bq1x8xdGUrliXFzSnUw.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added 'gitlab.example.com' (ECDSA) to the list of known hosts.
    

    Type yes and press Enter.

  4. Run the ssh -T git@gitlab.example.com command again. You should receive a Welcome to GitLab, @username! message.

If the welcome message doesn’t appear, you can troubleshoot by running ssh
in verbose mode:

ssh -Tvvv git@gitlab.example.com

Use different keys for different repositories

You can use a different key for each repository.

Open a terminal and run this command:

git config core.sshCommand "ssh -o IdentitiesOnly=yes -i ~/.ssh/private-key-filename-for-this-repository -F /dev/null"

This command does not use the SSH Agent and requires Git 2.10 or later. For more information
on ssh command options, see the man pages for both ssh and ssh_config.

View your account’s SSH keys

  1. Sign in to GitLab.
  2. On the left sidebar, select your avatar.
  3. Select Edit profile.
  4. On the left sidebar, select SSH Keys.

Your existing SSH keys are listed at the bottom of the page. The information includes:

  • The key’s:
    • Name.
    • Public fingerprint.
    • Expiry date.
    • Permitted usage types.
  • The time a key was last used. On GitLab.com this value is unavailable, and you are unable to see if or when an SSH key has been used. For more information, see issue 324764.

Select Delete to permanently delete an SSH key.

Use different accounts on a single GitLab instance

You can use multiple accounts to connect to a single instance of GitLab. You
can do this by using the command in the previous topic.
However, even if you set IdentitiesOnly to yes, you cannot sign in if an
IdentityFile exists outside of a Host block.

Instead, you can assign aliases to hosts in the ~/.ssh/config file.

  • For the Host, use an alias like user_1.gitlab.com and
    user_2.gitlab.com. Advanced configurations
    are more difficult to maintain, and these strings are easier to
    understand when you use tools like git remote.
  • For the IdentityFile, use the path the private key.
# User1 Account Identity
Host <user_1.gitlab.com>
  Hostname gitlab.com
  PreferredAuthentications publickey
  IdentityFile ~/.ssh/<example_ssh_key1>

# User2 Account Identity
Host <user_2.gitlab.com>
  Hostname gitlab.com
  PreferredAuthentications publickey
  IdentityFile ~/.ssh/<example_ssh_key2>

Now, to clone a repository for user_1, use user_1.gitlab.com in the git clone command:

git clone git@<user_1.gitlab.com>:gitlab-org/gitlab.git

To update a previously-cloned repository that is aliased as origin:

git remote set-url origin git@<user_1.gitlab.com>:gitlab-org/gitlab.git

Configure two-factor authentication (2FA)

You can set up two-factor authentication (2FA) for
Git over SSH. We recommend using
ED25519_SK or ECDSA_SK SSH keys.

Use EGit on Eclipse

If you are using EGit, you can add your SSH key to Eclipse.

Use SSH on Microsoft Windows

If you’re running Windows 10, you can either use the Windows Subsystem for Linux (WSL)
with WSL 2 which
has both git and ssh preinstalled, or install Git for Windows to
use SSH through PowerShell.

The SSH key generated in WSL is not directly available for Git for Windows, and vice versa,
as both have a different home directory:

  • WSL: /home/<user>
  • Git for Windows: C:\Users\<user>

You can either copy over the .ssh/ directory to use the same key, or generate a key in each environment.

If you’re running Windows 11 and using OpenSSH for Windows, ensure the HOME
environment variable is set correctly. Otherwise, your private SSH key might not be found.

Alternative tools include:

  • Cygwin
  • PuttyGen

Overriding SSH settings on the GitLab server

GitLab integrates with the system-installed SSH daemon and designates a user
(typically named git) through which all access requests are handled. Users
who connect to the GitLab server over SSH are identified by their SSH key instead
of their username.

SSH client operations performed on the GitLab server are executed as this
user. You can modify this SSH configuration. For example, you can specify
a private SSH key for this user to use for authentication requests. However, this practice
is not supported and is strongly discouraged as it presents significant
security risks.

GitLab checks for this condition, and directs you
to this section if your server is configured this way. For example:

$ gitlab-rake gitlab:check

Git user has default SSH configuration? ... no
  Try fixing it:
  mkdir ~/gitlab-check-backup-1504540051
  sudo mv /var/lib/git/.ssh/id_rsa ~/gitlab-check-backup-1504540051
  sudo mv /var/lib/git/.ssh/id_rsa.pub ~/gitlab-check-backup-1504540051
  For more information see:
  doc/user/ssh.md#overriding-ssh-settings-on-the-gitlab-server
  Please fix the error above and rerun the checks.

Remove the custom configuration as soon as you can. These customizations
are explicitly not supported and may stop working at any time.

Troubleshooting

TLS: server sent certificate containing RSA key larger than 8192 bits

In GitLab 16.3 and later, Go limits RSA keys to a maximum of 8192 bits.
To check the length of a key:

openssl rsa -in <your-key-file> -text -noout | grep "Key:"

Replace any key longer than 8192 bits with a shorter key.

Password prompt with git clone

When you run git clone, you may be prompted for a password, like git@gitlab.example.com's password:.
This indicates that something is wrong with your SSH setup.

  • Ensure that you generated your SSH key pair correctly and added the public SSH
    key to your GitLab profile.
  • Try to manually register your private SSH key by using ssh-agent.
  • Try to debug the connection by running ssh -Tv git@example.com.
    Replace example.com with your GitLab URL.
  • Ensure you followed all the instructions in Use SSH on Microsoft Windows.

Could not resolve hostname error

You may receive the following error when verifying that you can connect:

ssh: Could not resolve hostname gitlab.example.com: nodename nor servname provided, or not known

If you receive this error, restart your terminal and try the command again.

Key enrollment failed: invalid format error

You may receive the following error when generating an SSH key pair for a FIDO2 hardware security key:

Key enrollment failed: invalid format

You can troubleshoot this by trying the following:

  • Run the ssh-keygen command using sudo.
  • Verify your FIDO2 hardware security key supports
    the key type provided.
  • Verify the version of OpenSSH is 8.2 or greater by
    running ssh -V.

Search code, repositories, users, issues, pull requests…

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Sign up

Introduction

Git connects to remotes by default via HTTPS, which requires you to enter your login and password every time you run a command like Git pull or git push, using the SSH protocol. You may connect to servers and authenticate to access their services. The three services listed allow Git to connect through SSH rather than HTTPS. Using public-key encryption eliminates the need to type a login and password for each Git command.

Make sure a Git is installed

Make sure Git is installed before you start. Run the following command in your Windows terminal to see if Git is installed on your computer:

git --version

Enter fullscreen mode

Exit fullscreen mode

Install Git

To install Git, you can download the latest version from the official Git website. You can also install Git using Chocolatey or Winget package manager.

Install Git official website

To install Git from the official website, follow the steps below:

  1. Go to the official Git website and download the latest version of Git for Windows.
  2. Run the installer and follow the steps below:
    1. Click Next on the first two screens to accept the default options.
    2. Click Next on the Select Components screen.
    3. Click Next on the Choosing the default editor used by Git screen.
    4. Click Next on the Choosing the default terminal emulator screen.
    5. Select the Use Git from the Windows Command Prompt option.
    6. Select the Checkout Windows-style, commit Unix-style line endings option.
    7. Select the Use Windows’ default console window option.
    8. Click Next on the Configuring the line ending conversions screen.
    9. Click Next on the Configuring the terminal emulator to use with Git Bash screen.
    10. Click Install on the Choosing HTTPS transport backend screen.
    11. Click Finish on the Completing the Git Setup screen.
  3. Open a new command prompt window and verify that Git is installed correctly by typing git --version.

Install Git using Chocolatey

To install Git using Chocolatey, follow the steps below:

  1. Open Windows Terminal.
  2. Run the following command to install Git:
choco install git -y

Enter fullscreen mode

Exit fullscreen mode

  1. Verify that Git is installed correctly by typing git --version.

Install Git using Winget

To install Git using Winget, follow the steps below:

  1. Open Windows Terminal.
  2. Run the following command to install Git:
winget install --id=Git.Git  -e

Enter fullscreen mode

Exit fullscreen mode

  1. Verify that Git is installed correctly by typing git --version.

Note: Don’t forget to specify global Git settings using the following command after installing git:

git config --global user.name 'USERNAME'
git config --global user.email 'YOUR_EMAIL@EXAMPLE.COM'

Enter fullscreen mode

Exit fullscreen mode


Generate SSH keys

To generate SSH keys, follow the steps below:

  1. Open Windows Terminal.
  2. Run the following command (change your YOUR_EMAIL@EXAMPLE.COM with your email address) to establish a new SSH key pair:
ssh-keygen -t rsa -b 4096 -C "YOUR_EMAIL@EXAMPLE.COM"

Enter fullscreen mode

Exit fullscreen mode

  1. It will ask you where you want to save the private key (id rsa), and you may accept the default location by pressing Enter.

Whether you already have a private key, it will ask if you want to override it:

Overwrite (y/n)?

Enter fullscreen mode

Exit fullscreen mode

  1. If this happens, hit Enter and type y. Then, enter and re-enter the following passcode (think of it as a password):
Enter a file in which to save the key (/c/Users/you/.ssh/id_rsa): [Press enter]

Enter fullscreen mode

Exit fullscreen mode

  1. Enter a secure passphrase.
Enter passphrase (empty for no passphrase): [Type a passphrase]
Enter same passphrase again: [Type passphrase again]

Enter fullscreen mode

Exit fullscreen mode

  1. The SSH key pair is created in ~/.ssh, and the whole interaction should look like this:

Enter fullscreen mode

Exit fullscreen mode

  1. Verify that the SSH key was created by running the following command:
ls .\.ssh\

Enter fullscreen mode

Exit fullscreen mode

Add SSH key to the ssh-agent to your account

Copy the SSH key to your clipboard by running the following command:

Get-Content .\.ssh\id_rsa.pub | Set-Clipboard

Enter fullscreen mode

Exit fullscreen mode

GitHub

Sign in to your GitHub account using a browser by going to github.com and entering your username and password. Click your profile photo in the upper-right corner of the page, then Settings:

GitHub Settings

Select SSH and GPG keys from the user settings sidebar. Then select New SSH key from the drop-down menu. Put a descriptive label for the new key in the Title area (for example, your computer’s name) and paste your public key into the Key field. Last but not least, click Add SSH key:

GitHub Settings

The key is now visible in the list of SSH keys linked to your account:

GitHub Settings

GitLab

Sign in to your GitLab account using a browser by going to gitlab.com and entering your username and password. Click your profile photo in the upper-right corner of the page, then Settings:

GitLab Settings

Click SSH Keys in the User Settings sidebar. In the Key area, paste your public key. Fill in the Title area for the new key with a descriptive term (for example, the name of your computer). Finally, click the Add key:

GitLab Settings

The key is now visible in the list of SSH keys linked to your account:

GitLab Settings

Bitbucket

Log in to your Bitbucket account using a browser by going to bitbucket.org and entering your username and password. Click your profile photo in the lower-left corner of the website, then Bitbucket settings:

Bitbucket Settings

SSH keys may be found in the Settings sidebar’s Security section. After that, select Add key from the drop-down menu. Fill up the Description box with a descriptive label for the new key (such as your computer’s name), and then paste your public key into the Key field. Last but not least, choose to Add key:

Bitbucket Settings

The key has now been added to your account’s list of SSH keys:

Bitbucket Settings

Test connecting via SSH

Before utilizing SSH with Git, GitHub, GitLab, and Bitbucket allow you to verify whether the connection has been set up successfully.

GitHub Test Connecting via SSH

Open the terminal once you’ve added your SSH key to your GitHub account and type:

ssh -T git@github.com

Enter fullscreen mode

Exit fullscreen mode

If you’re connecting to GitHub over SSH for the first time, the SSH client will ask if you trust the GitHub server’s public key:

The authenticity of host 'github.com (140.82.113.4)' can't be established.
RSA key fingerprint is SHA256:a5d6c20b1790b4c144b9d26c9b201bbee3797aa010f2701c09c1b3a6262d2c02.
Are you sure you want to continue connecting (yes/no)?

Enter fullscreen mode

Exit fullscreen mode

Press Enter after typing yes. GitHub has been added to the list of trustworthy hosts in the SSH client:

Warning: Permanently added 'github.com,140.82.113.4' (RSA) to the list of known hosts.

Enter fullscreen mode

Exit fullscreen mode

You won’t be asked about GitHub’s public key again once you’ve added it to the list of known hosts.

The server notifies you that you have successfully authenticated and ends the connection: Because this remote access through SSH is offered by GitHub only for testing purposes and not for practical usage, the server informs you that you have successfully authenticated and terminates the connection:

Hi YOUR_USER_NAME! You've successfully authenticated, but GitHub does not provide shell access.

Enter fullscreen mode

Exit fullscreen mode

If you passed the test, you may now utilize SSH with GitHub.

The entire interaction should look something like this:

ssh -T git@github.com

The authenticity of host 'github.com (140.82.113.4)' can't be established.
RSA key fingerprint is SHA256:a5d6c20b1790b4c144b9d26c9b201bbee3797aa010f2701c09c1b3a6262d2c02.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'github.com,140.82.113.4' (RSA) to the list of known hosts.
Hi your_user_name! You've successfully authenticated, but GitHub does not provide shell access.
YOUR_USER_NAME@YOUR_HOST_NAME:~>

Enter fullscreen mode

Exit fullscreen mode

GitLab Test Connecting via SSH

The test is pretty similar if you’ve added your SSH key to your GitLab account:

ssh -T git@gitlab.com

The authenticity of host 'gitlab.com (35.231.145.151)' can't be established.
ECDSA key fingerprint is SHA256:4ac7a7fd4296d5e6267c9188346375ff78f6097a802e83c0feaf25277c9e70cc.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'gitlab.com,35.231.145.151' (ECDSA) to the list of known hosts.
Welcome to GitLab, @YOUR_USER_NAME!

Enter fullscreen mode

Exit fullscreen mode

If you passed the test, you may now utilize SSH with GitLab.

Bitbucket Test Connecting via SSH

The test is pretty similar if you’ve added your SSH key to your Bitbucket account:

ssh -T git@bitbucket.org

The authenticity of host 'bitbucket.org (104.192.143.1)' can't be established.
RSA key fingerprint is SHA256:fb7d37d5497c43f73325e0a98638cac8dda3b01a8c31f4ee11e2e953c19e0252.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'bitbucket.org,104.192.143.1' (RSA) to the list of known hosts.
logged in as YOUR_USER_NAME.

You can use git or hg to connect to Bitbucket. Shell access is disabled.

Enter fullscreen mode

Exit fullscreen mode

If you passed the test, you may now utilize SSH with Bitbucket.


References

  • GitHub SSH Key Setup
  • GitLab SSH Key Setup
  • Bitbucket SSH Key Setup

SSH-ключи представляют собой аутентификационные данные, которые позволяют безопасно соединяться с удаленным сервером. Если вы работаете с GitLab, создание SSH-ключей является важным шагом, чтобы обеспечить безопасность и защиту вашего доступа к репозиториям.

В данной подробной инструкции мы рассмотрим, как создать SSH-ключи в среде Windows для использования с GitLab. Мы покажем каждый шаг снабженный подробными объяснениями, чтобы вы смогли легко и без проблем создать свои SSH-ключи на своем компьютере.

Процесс создания SSH-ключей в Windows включает в себя несколько этапов. Сначала вам нужно установить Git Bash, затем сгенерировать SSH-ключи, а затем скопировать открытый ключ и добавить его в ваш аккаунт GitLab. Мы рассмотрим каждый из этих шагов и дадим вам все необходимые инструкции для успешного выполнения этих действий.

Создание SSH-ключей в Windows для GitLab может показаться сложной задачей, однако, следуя этой подробной инструкции, вы сможете без проблем сгенерировать свои аутентификационные данные и наслаждаться безопасным доступом к вашим репозиториям на GitLab.

Содержание

  1. Почему нужно использовать SSH-ключи при работе с GitLab и Windows?
  2. Как установить Git Bash в Windows для работы с SSH-ключами
  3. Генерация SSH-ключей в Git Bash для работы с GitLab

Почему нужно использовать SSH-ключи при работе с GitLab и Windows?

  • Безопасность: SSH-ключи гарантируют безопасность вашего подключения, так как они используют асимметричное шифрование для передачи данных.
  • Удобство: после настройки SSH-ключей, вы можете подключаться к GitLab без необходимости вводить пароль каждый раз.
  • Автоматическая аутентификация: при использовании SSH-ключей, GitLab может автоматически аутентифицировать вас и проверить, что вы имеете право получить доступ к нужным репозиториям.
  • Доступ к приватным репозиториям: использование SSH-ключей позволяет вам иметь доступ к приватным репозиториям без необходимости каждый раз вводить учётные данные.

В целом, использование SSH-ключей при работе с GitLab и Windows делает процесс авторизации и подключения более безопасным и удобным. Наша подробная инструкция поможет вам создать SSH-ключи и настроить их для работы с GitLab на вашей Windows-машине.

Как установить Git Bash в Windows для работы с SSH-ключами

Git Bash представляет собой эмулятор командной строки, предназначенный для работы с Git и другими инструментами командной строки в системе Windows. Он позволяет выполнять те же самые команды, которые можно использовать в Linux или Mac, что упрощает работу с Git и SSH-ключами.

Вот пошаговая инструкция по установке Git Bash в Windows:

  1. Перейдите на официальный сайт Git по адресу https://git-scm.com/.
  2. Нажмите на кнопку «Скачать», чтобы загрузить установочный файл Git для Windows.
  3. Откройте загруженный файл и запустите процесс установки.
  4. Выберите папку для установки Git, оставив значение по умолчанию, и нажмите «Далее».
  5. Выберите компоненты для установки, оставив значения по умолчанию, и нажмите «Далее».
  6. Выберите редактор по умолчанию для Git, оставив значение по умолчанию, и нажмите «Далее».
  7. Выберите пункт «Use Git from Git Bash only», чтобы использовать Git Bash вместо стандартного командного интерфейса Windows, и нажмите «Далее».
  8. Выберите пункт «Use the OpenSSL library», чтобы использовать библиотеку OpenSSL для шифрования данных, и нажмите «Далее».
  9. Выберите пункт «Checkout Windows-style, commit Unix-style line endings», чтобы привести окончания строк к стилю Windows при проверке файлов, и нажмите «Далее».
  10. Выберите пункт «Enable file system caching» для улучшения производительности работы с Git, и нажмите «Далее».
  11. Выберите пункт «Enable Git Credential Manager», чтобы использовать менеджер учетных данных Git для хранения ваших учетных данных, и нажмите «Далее».
  12. Выберите пункт «Enable symbolic links», чтобы включить поддержку символических ссылок, и нажмите «Далее».
  13. Выберите пункт «Enable Git Bash Here», чтобы добавить контекстное меню «Git Bash Here» в проводнике Windows, и нажмите «Далее».
  14. Выберите пункт «Enable Git GUI Here», чтобы добавить контекстное меню «Git GUI Here» в проводнике Windows, и нажмите «Далее».
  15. Выберите пункт «Default (fast-forward or merge)», чтобы выбрать стратегию по умолчанию для слияния веток в Git, и нажмите «Далее».
  16. Нажмите «Установить», чтобы начать процесс установки Git.
  17. Подождите, пока процесс установки завершится.
  18. Нажмите «Завершить», чтобы закрыть установщик Git.

После установки Git Bash будет доступен в меню «Пуск» или на рабочем столе. Вы можете открыть его и начать работу с Git и SSH-ключами в командной строке.

Генерация SSH-ключей в Git Bash для работы с GitLab

Шаг 1. Установите Git Bash, если у вас его еще нет. Вы можете скачать его с официального сайта Git (https://git-scm.com/downloads) и выполнить установку следуя инструкциям.

Шаг 2. Откройте Git Bash из меню Пуск или запустив ярлык на рабочем столе. Этот терминал будет использоваться для генерации и настройки SSH-ключей.

Шаг 3. Введите следующую команду в Git Bash, чтобы сгенерировать новую пару SSH-ключей:

ssh-keygen -t rsa -b 4096 -C "your_email@example.com"

Вместо «your_email@example.com» введите вашу электронную почту, которую используете на GitLab.

Шаг 4. Git Bash спросит вас, в какую директорию сохранить ключи. Вы можете выбрать место, где вам удобно сохранить ключи, или оставить значение по умолчанию, просто нажав Enter.

Шаг 5. Git Bash также спросит вас, должны ли ключи быть защищены паролем. Если вы хотите, чтобы каждый раз при использовании ключа вас спрашивали пароль, введите пароль дважды. Если вы не хотите устанавливать пароль, просто оставьте поле пустым и нажмите Enter.

Шаг 6. После успешной генерации ключей, Git Bash покажет вам путь к вашему созданному ключу, например: /c/Users/your_username/.ssh/id_rsa. Сохраните этот путь, так как он понадобится нам далее.

Шаг 7. Откройте содержимое вашего публичного ключа, который был сгенерирован в предыдущем шаге. В Git Bash введите команду:

cat ~/.ssh/id_rsa.pub

Скопируйте отображаемый ключ, он будет выглядеть примерно так:

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDhbnVzDzIszws7qme...

Шаг 8. Теперь вам необходимо добавить свой публичный ключ в настройки GitLab. Перейдите в настройки вашего профиля в GitLab, затем в режиме чтения-записи скопируйте ваш публичный ключ в поле «SSH Keys» и сохраните изменения.

Готово! Теперь вы можете использовать SSH-ключи для работы с GitLab на своем компьютере.

The Secure Socket Shell (SSH) is the preferred connection mechanism, especially when compared to HTTPS, to connect from Git to a remote server such as GitLab, GitHub or BitBucket.

In this Git tutorial, we show you how to configure SSH keys to securely connect your local Git instance with your remote repositories.

GitLab SSH key configuration steps

The steps to follow to configure GitLab SSH keys for secure Git connections are as follows:

  1. Create an SSH key pair on your personal computer
  2. Copy the value of the public SSH key
  3. Log into GitLab and navigate to your account’s Preferences tab
  4. Create a new GitLab SSH key
  5. Paste the public key in as the value and set an expiration date
  6. Copy the SSH URL of the GitLab repo you wish to clone
  7. Issue a git clone command with the SSH URL

Create GitLab SSH Keys with ssh-keygen

Both Ubuntu and Windows machines support SSH out of the box.

Updated versions of Windows 10 and Windows Server have built-in support since 2018, so there is no need to download Putty, PuttyGen or Plink to create RAS keys or to SSH in to GitLab. Just open PowerShell in Windows or a Linux terminal window on Ubuntu and issue the following command:

C:\gitlab\ssh\example> ssh-keygen -o -t rsa -C "[email protected]"

The options provided to the ssh-keygen command force the tool to create an RSA compatible key using the latest OpenSSL standards. The -C switch simply adds a comment to the end of the public file.

Git and SSH tutorials

Need to setup SSH for GitHub, GitLab, or CodeDeploy? These SSH Key tutorials will help:

  • Find out how to build SSH keypairs for GitHub
  • Administer Git SSH Keys on Windows desktops
  • Run your first GitHub Clone over SSH
  • Network securely with BitBucket SSH Keys
  • Learn about the GitHub SSH KeyGen utility
  • Fix annoying GitHub Permission Denied Errors

These quick tutorials will get you working with Git and the secure shell in no time.

Accept all of the defaults when prompted for a passphrase or a special storage location. By default, all GitLab SSH keys must go in an .ssh folder under the user’s home directory. Furthermore, a blank passphrase is acceptable unless your organization’s compliance rules state otherwise.

This operation will create Git SSH keys named id_ras.pub and id_rsa respectively.

Copy the public SSH key

You must configure the value of the public key in GitLab. Open the public key in a text editor and copy the value to the clipboard:

GitLub SSH Key Git

Copy the .pub key produced from the GitLab SSH key generation operation and configure it into GitLab.

Configure GitLab SSH keys

Log into GitLab and click on your account preferences.

Click the SSH Keys link and paste the copied value into the text field.

Set an expiration date, and then click the blue button to persistently add the GitLab SSH key.

GitLab SSH Key Config

Configure GitLab SSH keys under your account preferences.

Clone GitLab with SSH

With the SSH key configured in GitLab, you can now perform regular Git operations such as clone, push, pull and fetch over SSH. Simply clone your repository of choice with the SSH URL, which is found on the landing page of your GitLab project. My GitLab SSH URL is structured as follows:

[email protected]:cameronmcnz/five-commits.git

Now that you’ve configured GitLab SSH and copied the SSH URL, issue a clone command in PowerShell. The GitLab SSH clone operation pauses to ask if you can confirm the authenticity of the keys being used. Type in yes and allow the operation to continue.

PS C:\gitlab\ssh\example> git clone [email protected]:cameronmcnz/five-commits.git
Cloning into ‘five-commits’ from GitLab over SSH…
Authenticity of GitLab SSH Key can’t be established.
Do you still want to connect to GitLab over SSH (yes or no)? yes
Clone from GitLab over SSH: 100% (222/222), 2.23 MiB | 3.41 MiB/s, done.
Resolving deltas from GitLab over SSH: 100% (111/111), done.

Pull and push to GitLab over SSH

Once the clone operation is successful, continue to use Git as you normally would. All future pull and push operations to GitLab will happen over a secure SSH connection.

And that’s how easy it is to configure GitLab SSH keys to ensure all distributed Git operations happen over a secure channel.

  • Github windows 10 activation script
  • Github for windows как пользоваться
  • Git не является внутренней или внешней командой исполняемой программой или пакетным файлом windows
  • Github desktop скачать для windows 10
  • Github desktop 32 bit windows 7