Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I looked at all other posts that are similar. I'm probably missing something simple since I'm relatively new to this.

I have an Amazon-EC2 instance with Amazon Linux. I'm using Cygwin on Windows 7.

I access this instance regularly from my mac perfectly fine, so I assume everything on the linux machine is fine?

I do this:

ssh -l ec2-user -v -i perlykey.pem

And this is what I get:

OpenSSH_6.1p1, OpenSSL 1.0.1c 10 May 2012
debug1: Connecting to [] port 22.
debug1: Connection established.
debug1: identity file perlykey.pem type -1
debug1: identity file perlykey.pem-cert type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH_5*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: RSA 9c:51:ed:30:f1:cc:e6:46:f0:97:94:b5:d9:9f:32:bc
debug1: Host '' is known and matches the RSA host key.
debug1: Found key in /home/gideon/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: perlykey.pem
debug1: read PEM private key done: type RSA
debug1: Authentications that can continue: publickey
debug1: No more authentication methods to try.

And finally

Permission denied (publickey).

Any clues as to what I'm doing wrong?

share|improve this question
Have you checked the permissions of authorized_keys on the linux machine? This file needs to be 600. Also the ~/.ssh dir needs to have 700 perms. – val0x00ff Jan 10 '13 at 9:32
Hm. I've been accessing this instance from my mac mini regularly for a month now. I'm assuming if that was possibly then, then everything is fine on the linux machine? – gideon Jan 10 '13 at 9:35
.pem seems to be an unusual format for ssh rsa keys to me... compare the format inside with what ssh-keygen builds for you when you make a new key on the cygwin system. – rackandboneman Jan 10 '13 at 9:43
A similair problem is described in… – val0x00ff Jan 10 '13 at 9:57
@rackandboneman but this is a file amazon generates, is it *nix specific? IOW you're saying I should generate a new key and check its format? – gideon Jan 10 '13 at 10:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.