The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
115 views

Deleting a Key Pair for AWS EC2 Instance with EBS

I have an AWS EC2 Instance using EBS and I want to stop the use of the current private key, and use a new one. As I understand it, merely deleting the key pair on the AWS Console just deletes the ...
-2
votes
1answer
113 views

Speedup of fixing an openssl bug with 8192 bit key [closed]

This is related to this Bug-Report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453 OpenSSL contains a set of arbitrary limitations on the size of accepted key parameters that ...
2
votes
1answer
27 views

Using puppet to manage ntpd certificates

My company is requiring me to implement signed time in ntpd with autokey. One of the requirements for autokey to work is to generate keys on each host. All the clients are part of the same group so ...
3
votes
2answers
2k views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
3
votes
1answer
35 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
0
votes
1answer
61 views

I have changed my server, Do I need to re generate the ssl key

I am using AWS for hosting. I have got one productions instance and pre-production instance in it. I have installed ssl to the production site. But unfortunately its crashed. So we cloned the ...
27
votes
8answers
3k views

What are best practices for managing SSH keys in a team?

I work with small teams (<10) of developers and admins with the following characteristics: Most members of the team have >1 personal computer, most of which are portable Team members have access ...
0
votes
2answers
154 views

SSH:using single public key on multiple remote machines and spoofing-by-known-server

Lyrics Usually, people say, that using single public key on several servers is just as secure as using unique public keys on each of them. (If we're not talking about possibility of private key being ...
5
votes
1answer
132 views

Finding Windows keys in use throughout corporation

We own a lot of Windows desktop keys (XP, Vista, and Windows 7) and have documented their usage and availability. Now the documentation has fallen behind and we don't know what keys are used where. Of ...
1
vote
1answer
85 views

How to securely control access to a backend key server?

I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data. I'm planning on creating a simple key server on a different machine, and ...
1
vote
2answers
165 views

How to create a new user and exempt the user of key authentication?

1 I have configured Ubuntu server with Key authentication & it is working fine. I have disabled password authentication for key authentication to work. Server is always accessed via remote ...
0
votes
1answer
641 views

Steps to use juju to orchestrate a devStack fresh VM setup?

Using this devStack guide : Running a Cloud in a VM to test OpenStack. What would be the steps to get the correct juju configuration from a fresh devStack setup? EDIT : Found out the first ...
-4
votes
1answer
949 views

Lost key to Dell server casing [closed]

I lost the key to remove the casing on my Dell T710 Server. Where can I get a replacement key?
1
vote
1answer
65 views

Linux group keyring (eg request_key and add_key)

I'm working on building an application that needs to use the group keyring to share some sensitive data between processes with different owners. Whenever I try to access the group keyring (e.g."@g") ...
1
vote
4answers
862 views

SSH key based authentication in Perl server

I have a server written in Perl that clients connect to in order to perform some management tasks. Without going into details I would like to achieve two things: encrypt connection channel between ...
2
votes
1answer
445 views

Windows 2003 DNS TSIG transfer?

I am trying to use a Windows 2003 R2 server as a secondary dns server for my BIND 9 master. The problem is I use keys to control transfers and I dont know how to add the key to Windows so its able to ...
0
votes
2answers
1k views

How to allow password authentication OR key authentication on CentOS 5.7?

is it possible to enable the use of password authentication or key authentication in CentOS 5.7? All I can find is setting PasswordAuthentication to no which forces the use of keys... Thanks
0
votes
1answer
153 views

Authenticate user(group) and encrypt port 8078 on a server using SSH2 keys?

I want to encrypt and authenticate port 8078 on a server running Jenkins using SSH keys (I'll pass our the public or private key as needed), and keep 8078 from being accessed by anything but SSH. I ...
20
votes
4answers
6k views

Centralized management system for SSH keys?

We are looking to switch to key-based management of SSH logins, and wonder if there any key-management systems which would allow us to centrally manage the access keys world-wide. The system should ...
0
votes
2answers
526 views

Redis using lots of RAM, steadily increasing until I restart it

I have a simple redis installation and it seems to slowly eat more and more ram at a steady incline until I restart the redis server. I'm using redis as a caching layer, currently I don't set an ...
0
votes
1answer
471 views

.Net SqlClient Data Provider error when comparing keys in powershell DB install

I am trying to install Databases on a new windows 7 machine with powershell code that was meant for windows xp. I have been able to fix most of the problems as I have come across them but I have been ...
2
votes
1answer
413 views

What is sshkeys-lint

I was following some instructions on a website, and it told me to run sshkeys-lint to check ssh keys. I never heard of sshkeys-lint and can't apt-get. Is this a typo?
0
votes
2answers
2k views

I have the private DSA key in PEM format. What do I do next to access SSH without a password?

I have the private DSA key in PEM format. What do I do next to access SSH without a password? Sample certificate in PEM format: ...
0
votes
2answers
1k views

How do I configure MySQL command line client key bindings?

I often use the mysql command-line client on an Ubuntu box. It works fine, except that the key bindings are wrong. Specifically, pressing "Home", "End", or "Delete" makes it output a ~ (tilde) ...
2
votes
2answers
158 views

When should I generate a new private key for SSL?

I'm renewing a wildcard SSL cert. The easiest option is to use my existing private key and generate a new CSR using that. Is there any reason (assuming my private key hasn't been compromised) to go ...
1
vote
1answer
74 views

Freenx with ssh that requires keys?

Is it possible to connect to a Freenx server if ssh requires the use of keys instead of passwords? If so, how would I connect using the client?
2
votes
2answers
549 views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
3
votes
3answers
2k views

How to stop SSH from falling back to password?

A script regularly initiates an SSH connection from one server to another, using SSH keys. However, once, the keys were briefly overwritten. This caused the SSH client to fall back to asking for a ...
1
vote
1answer
197 views

DNSSEC - First Signature

I'm testing DNSSEC with Bind 9.7.2-P2. I have a question regarding the first signature created over a zone that already exists. I'm using dynamic DNS. I create the first two keys: one KSK and one ...
0
votes
1answer
126 views

Which is faster, key_cache or OS cache?

In a tb with 1 mil. rows if I do (after I restart the computer - so nothing it's cached): 1. SELECT price,city,state FROM tb1 WHERE zipId=13458; the result is 23rows in 0.270s after I run 'LOAD ...
2
votes
2answers
989 views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify ...
1
vote
1answer
128 views

DNSSEC - DNSKEY RRSIG not updated

Does anybody know why the DNSKEY RRsigs are not re-signed with dynamic update?? Regards
0
votes
2answers
139 views

DNSSEC - Dynamic Update

I'm testing key rollover with Dynamic Update. I'm using Bind 9.7.1-P2. When I change the key dates with the script dnssec-settime, named doesn´t update automatically the zone file unless I reload the ...
3
votes
3answers
2k views

Two-Factor Authentication - SSH using Keys & Local Account Password

Is it possible and feasible to setup a linux box to first require a valid key file before prompting for the user's local account credentials? Our setup is that we have to open ssh on a machine to the ...
3
votes
4answers
7k views

Why isn't my public key allowing me to sign in without a password?

On my home network I have a server running Ubuntu and another desktop running Windows 7. I'm using cygwin on the Windows machine to ssh into the server. I attempted to set up keys between these two ...
0
votes
5answers
557 views

Capistrano security

We are using Capistrano in some systems as a deploy system. The new sysadmin we have says that our setup is really dangerous and I would like to know how to fix it. We have a deploy user called "foo" ...
1
vote
1answer
155 views

Simple PHP encryption

I'm looking for an asymmetric encryption library for php that can generate keys, hand out public keys and decrypt incoming messages with the corresponding private key. However, I'm a novice in the ...
1
vote
3answers
1k views

Old dell workstations need to have XP reinstalled but there are no restore disks; Besides ordering restore disk what is the best option?

All of the workstations are XP Pro oem from Dell. I need to reinstall XP and all I have access to are the MSDN copies of XP. I found a page on Dell's website where they would send you a free copy of a ...
5
votes
1answer
153 views

Policies for maintaining access credentials on EC2

Managing EC2 access keys and X.509 certificates can become challenging when you start to deal with large numbers of instances. Do any EC2 users here have good policies and/or tools for: rotating ...
2
votes
1answer
896 views

Radius + SSH Key Authentication

Does anyone know if it is possible to configure pam to require both radius AND ssh-key to successfully authenticate ?
6
votes
2answers
2k views

SSH keys management system

I'm looking to switch from password based (which I starting to become overwhelmed with) to SSH keys based system. I'd like to know if there any SSH keys management system or server solution, which ...
2
votes
2answers
550 views

Stolen Windows7 Keys! Help

I work in the IT Department of my company and we use one multi-license Windows 7 Ultimate Productkey for our in-house machines. Lately I've come to the strong suspicion, that workers from other ...
9
votes
3answers
5k views

How do I setup sshd on Mac OS X to only allow key-based authentication?

I have a Mac OS X machine (Mac mini running 10.5) with Remote Login enabled. I want to open the sshd port to the Internet to be able to login remotely. For security reasons I want to disable remote ...
0
votes
2answers
209 views

How can you tell how old an ssh key is?

I'm connecting to a remote server, but want to make sure that they keys have been created relatively recently. How can I tell when the keys for that ssh server were generated? If I can't check ...
4
votes
4answers
1k views

Enforce SSH key passwords?

I'm looking at removing password-based logins for SSH. However, I don't want to allow passwordless ssh keys, as that would be even worse. How can I make sure that only SSH keys which have passwords ...
0
votes
2answers
1k views

What is the simplest way to delete a corrupt registry key?

I have a registry key that produces an error when selected in regedit. It may have multiple but unknown subkeys. regeidt isn't up to the task what is the best way to wipe out this key and anything ...
15
votes
5answers
8k views

SSH: Do you use one private/public key pair for each remote machine? Or a single pair for all?

When you want to have public key based ssh logins for multiple machines, do you use one private key, and put the same public key on all of the machines? Or do you have one private/public key pair for ...
1
vote
2answers
161 views

authentication keys for ssh

I use the following commands on computer A to generate authentication key for ssh from computer A to computer B ssh-keygen -t rsa scp ~/.ssh/id_rsa.pub B:.ssh/authorized_keys2 If further I need to ...
0
votes
4answers
3k views

How to make connection between two computers using ssh-keygen

I want to use rsync command between two computers and both of them have RedHat 5.3 , when I googled for way to make that, I discovered that I have to make public key between them to not prompt ...
1
vote
2answers
1k views

How to send Alt-Tab through the Putty?

I want to use bash completion for command parameters on a remote computer. How can I send Alt-Tab combination in Putty? Is there other key combinations for this?