使用 openssl 将 SSH2 RSA 私钥转换为 .pem

Question 1

ssh-keygen -p可以在 SSH2 和 PEM 格式之间进行转换：

 -m key_format
         Specify a key format for key generation, the -i (import),
         -e (export) conversion options, and the -p change
         passphrase operation.  The latter may be used to convert
         between OpenSSH private key and PEM private key formats.
         The supported key formats are: “RFC4716” (RFC 4716/SSH2
         public or private key), “PKCS8” (PKCS8 public or private
         key) or “PEM” (PEM public key).  By default OpenSSH will
         write newly-generated private keys in its own format, but
         when converting public keys for export the default format
         is “RFC4716”.  Setting a format of “PEM” when generating or
         updating a supported private key type will cause the key to
         be stored in the legacy PEM private key format.

从 SSH2 到 PEM：

ssh-keygen -p -f id_rsa -m PEM

从 PEM 到 SSH2：

ssh-keygen -p -f id_rsa -m SSH2

警告：指定的文件将被覆盖并就地更新！

笔记：虽然ssh-keygen-g3链接到商业产品，ssh-keygen是更常见的开源版本。您可以在您的系统上免费获取它，它适用于 Linux、Windows、FreeBSD 和 PASE 等。如果您愿意，您可以在具有它的系统上执行转换：SSH2/PEM 密钥毕竟只是纯文本文件，只要小心不要遗失它们就行了。

Answer

ssh-keygen -p可以在 SSH2 和 PEM 格式之间进行转换：

 -m key_format
         Specify a key format for key generation, the -i (import),
         -e (export) conversion options, and the -p change
         passphrase operation.  The latter may be used to convert
         between OpenSSH private key and PEM private key formats.
         The supported key formats are: “RFC4716” (RFC 4716/SSH2
         public or private key), “PKCS8” (PKCS8 public or private
         key) or “PEM” (PEM public key).  By default OpenSSH will
         write newly-generated private keys in its own format, but
         when converting public keys for export the default format
         is “RFC4716”.  Setting a format of “PEM” when generating or
         updating a supported private key type will cause the key to
         be stored in the legacy PEM private key format.