Creating a SSH Public Key on OSX¶
You generate an SSH key through Mac OS X by using the Terminal application. Once you upload a valid public SSH key, Gerrit can authenticate you based on this key.
An SSH key consists of a pair of files. One is the private key, which you should never give to anyone. No one will ever
ask you for it and if so, simply ignore them - they are trying to steal it.
The other is the public key. When you generate your keys, you will use
ssh-keygen to store the keys in a safe location
so you can authenticate with Gerrit.
To generate SSH keys in Mac OS X, follow these steps:
Enter the following command in the Terminal window:
ssh-keygen -t rsa -b 4096
This starts the key generation process. When you execute this command, the ssh-keygen utility prompts you to indicate where to store the key.
ENTERkey to accept the default location. The ssh-keygen utility prompts you for a passphrase.
Type in a passphrase. You can also hit the
ENTERkey to accept the default (no passphrase). However, this is not recommended.
You will need to enter the passphrase a second time to continue.
After you confirm the passphrase, the system generates the key pair and you will see output like this:
Your identification has been saved in /Users/yourmacusername/.ssh/id_rsa. Your public key has been saved in /Users/yourmacusername/.ssh/id_rsa.pub. The key fingerprint is: ae:89:72:0b:85:da:5a:f4:7c:1f:c2:43:fd:c6:44:38 firstname.lastname@example.org The key's randomart image is: +--[ RSA 2048]----+ | | | . | | E . | | . . o | | o . . S . | | + + o . + | |. + o = o + | | o...o * o | |. oo.o . | +-----------------+
Your private key is saved to the
id_rsa file in the
.ssh subdirectory of your home directory and is used to verify
the public key you use belongs to your Gerrit account.
Never share your private key with anyone! Ever! We mean it!
Your public key is saved to a file called
id_rsa.pub in the
.ssh subdirectory of your home directory. You can copy
it to your clipboard using the following command:
pbcopy < ~/.ssh/id_rsa.pub
Gerrit is using the special port
29418 instead of the default SSH port
22 which has to be configured accordingly. This can be done in your local
~/.ssh/config file which would contain the following sections then:
Host review.typo3.org Port 29418
Testing your connection:
ssh -T <YOUR_TYPO3_USERNAME>@review.typo3.org