将.pem密钥转换为.ppk密钥

1. Overview

In this tutorial, we’ll be looking at how to convert a key from .pem to .ppk format in Linux.

2. Differences Between .pem Format and .ppk Format

The .pem and .ppk formats are similar in that both of them store the private key information of asymmetric key pairs. The difference between them, however, is the way the private key is stored in the file. Additionally, the .ppk format is only understood by the PuTTY program, whereas other SSH clients generally require the keys to be in the .pem format.

Let’s look at an example. For the same key id_rsa, the .pem format encodes the data in Base64 and includes a distinctive header and footer:

On the other hand, here’s how the .ppk format stores the same key:

$ PuTTY-User-Key-File-2: ssh-rsa
Encryption: none
Comment: imported-openssh-key
Public-Lines: 6
AAAAB3NzaC1yc2EAAAADAQABAAABAQDk9tqFTTeTWgp/5IlWpD4XLl914x0r6JMo
vTxTNBsd9q0i3lgTS9y1br78Ey+5J4tYvMPc3xRkALhpWwN63Ac9Wj50o0Ka5Ibi
OZBuTmLrAPG7sUiNzy0JxGi0BhClRXVInX2GKKu4MQMx1nA8Q6jrtmlWg+k+mNkt
qa3zbRL6Zgb9VV+bprYA6s8MG5VWQjNWJclMJTMPOaA9LTNrxw46GVsTDPPY1dtW
jSDz6JhRNcSWkZ75tVOPmRbAOD4bcPk88/DPM9giZ8hmviJAdo0YwdZj1MAXHdEE
n8yRbHmAB0lHBMDVl5/uokKbQXMGeqStKk+cYJ+o1SmCjMZBEMVh
Private-Lines: 14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Private-MAC: 078893967d499e1561f90460a73b2879916a3dc5

Because the contents are similar, it’s easy to convert one format into another with the help of command-line tools like puttygen. Let’s look at how we can convert our .pem key to a .ppk for use with PuTTY.

3. Converting Keys Into .ppk Format Using puttygen

PuTTYgen is a command line tool for generating SSH key pairs. Additionally, it also allows us to convert the key pairs into different formats.

3.1. Installing puttygen

To obtain the binary, we have to install the putty-tools package on our system. Depending on the Linux distribution, we can install the software using the package manager of the system. For example, we’ll use apt-get in Ubuntu Linux:

$ sudo apt-get update
$ sudo apt-get install -y putty-tools

Once the installation completes without error, we can verify the installation:

$ puttygen --version
puttygen: Release 0.73
Build platform: 64-bit Unix
Compiler: gcc 9.3.0
Source commit: 745ed3ad3beaf52fc623827e770b3a068b238dd5

3.2. Converting .pem File to .ppk

To convert a .pem key file into .ppk format, we can use the -O option with the private or public argument, depending on the type of keys we want to convert.

For example, let’s convert an existing id_rsa.pem into its corresponding .ppk file:

$ puttygen id_rsa.pem -O private -o id_rsa_private.ppk

The command above extracts the private key from id_rsa.pem and saves it in the .ppk format in the id_rsa_private.ppk file.

Conversely, to obtain the public key, we use the public argument on the -O option:

$ puttygen id_rsa.pem -O public -o id_rsa_public.ppk

4. Conclusion

In this tutorial, we first learned that the .pem and .ppk key formats store private keys differently. Then, we introduced the puttygen tool along with basic installation information. Finally, we’ve demonstrated the command for converting the .pem file into its corresponding .ppk file.

Persistence

REST