Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have two files, id_rsa and, what command can be used to validate if they are the valid pair.

share|improve this question
I'll confirm Michuelnik's answer; it saved me from having to make a new key pair, thanks. ssh -v helps a lot too. – Chris K Dec 30 '13 at 5:06

2 Answers 2

up vote 26 down vote accepted

Question is already answered on stackoverflow:

(Can I mark a question as duplicate on another stackexchange network?)

I would prefer the ssh-keygen -y -e -f <private key> way instead of the accepted answer on SO.

ssh-keygen -y -e -f <private key> takes a private key an prints the corresponding public key which can be directly compared to your available public keys. (Hint: beware of comments or key-options)

(How the hell is it doing that? I can only hope the public key is encoded directly or indirectly in the private key...)

Needed this myself and used the following bash-oneliner. It should output nothing if the keys belong together. Apply a little -q to the diff in scripts and diff only sets the return code appropriately.

diff <( ssh-keygen -y -e -f "$PRIVKEY" ) <( ssh-keygen -y -e -f "$TESTKEY" )
share|improve this answer
No answer has been accepted yet. And I like yours better. – Michael Hampton Sep 11 '12 at 18:03
@MichaelHampton: now I understand your comment. "the accepted answer" should refer to the question on stackoverflow not this question... – Michuelnik Sep 12 '12 at 5:38
@Sirch: I thought the decision which key is private and which one is public is pure random since the two keys are equal. What one key encrypts can only be decrypted with the other. And if one key could be obtained from the other this all would not work out. – Michuelnik Sep 25 '13 at 11:42
@Michuelnik You can derive the public key from the private key. You cant derive the private key from the public key. Were not talking about the material that it encrypts. – Sirch Sep 25 '13 at 13:35
@Michuelnik imho, the question is off topic on SO and on-topic here (and/or Superuser). imho, it shouldn't be marked as duplicate and instead flagged there for migration. But it's covered on both so I like the more complete sharing of information. – Chris K Dec 30 '13 at 20:39

If they're on your local system, stick in your $HOME/.ssh/authorized_keys and ssh to localhost using the id_rsa key. If it works, then they match.

cat $HOME/.ssh/ >> $HOME/.ssh/authorized_keys
ssh -i $HOME/.ssh/id_rsa localhost
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.