The tag has no usage guidance.

learn more… | top users | synonyms

4
votes
2answers
2k views

consequences of deleted key pair on ec2 instance

What will happen if the keypair associated with an ec2 instance is deleted via the aws management console? Will this block access to the instance forever?
1
vote
1answer
93 views

Linux group keyring (eg request_key and add_key)

I'm working on building an application that needs to use the group keyring to share some sensitive data between processes with different owners. Whenever I try to access the group keyring (e.g."@g") ...
1
vote
4answers
1k views

SSH key based authentication in Perl server

I have a server written in Perl that clients connect to in order to perform some management tasks. Without going into details I would like to achieve two things: encrypt connection channel between ...
4
votes
1answer
2k views

Can an AWS CloudFormation create a KeyPair to subsequently use when starting instances?

I would like to launch my stack using a keypair that is created as part of the CloudFormation. Is that possible? .... "Resources": { "ReverseProxyKeyPair": { "Type": "AWS::EC2::KeyPair"...
3
votes
1answer
666 views

Windows 2003 DNS TSIG transfer?

I am trying to use a Windows 2003 R2 server as a secondary dns server for my BIND 9 master. The problem is I use keys to control transfers and I dont know how to add the key to Windows so its able to ...
3
votes
2answers
682 views

Do I need to back up the SQL Server Encryption Password and Symmetric Key?

I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN: Create the Master Key with a strong password. Create a ...
2
votes
1answer
6k views

Why does replication fail with error Duplicate entry for key?

We have been replicating for a year or two now with little problem. Sometimes we get an erroneous SQL query which stops replications, and we use the following commands to get it going again: STOP ...
1
vote
1answer
2k views

net.ipv6.conf.all.forwarding = 1 is an unknown key

I have few system with ipv6 addresses. I want to forward request from one system to another. hence I kept the option net.ipv6.conf.all.forwarding = 1 in sysctl.conf but the request is not getting ...
2
votes
1answer
153 views

Correct use of RSA Key Pairs

I have recently began making use of RSA Key pairs to login to various servers I manage and wanted to get some insight on best practice as I recently ran into some issues. Is it best practice to keep ...
0
votes
2answers
2k views

How to allow password authentication OR key authentication on CentOS 5.7?

is it possible to enable the use of password authentication or key authentication in CentOS 5.7? All I can find is setting PasswordAuthentication to no which forces the use of keys... Thanks
0
votes
1answer
167 views

Authenticate user(group) and encrypt port 8078 on a server using SSH2 keys?

I want to encrypt and authenticate port 8078 on a server running Jenkins using SSH keys (I'll pass our the public or private key as needed), and keep 8078 from being accessed by anything but SSH. I ...
26
votes
2answers
40k views

public key authentication fails ONLY when sshd is daemon

I have no clue on how this happens. The distro is Scientific Linux 6.1 and everything is set up to perform authentication via public key. Yet, when sshd is running as a daemon (service sshd start), it ...
2
votes
1answer
695 views

Wowza on EC2 Set up and Questions

I have a wowza instance installed and running on EC2, but I can't find the keypair file. I am trying to install another wowza instance on a different aws account. I have the following questions, I'd ...
1
vote
2answers
248 views

sshd helper program on access to authorized_keys

second question, second problem: I am searching for a way to dynamically let sshd search for public keys on my server. So, shortly spoken, I want, when authorized_keys is accessed by sshd, a helper ...
25
votes
4answers
11k views

Centralized management system for SSH keys?

We are looking to switch to key-based management of SSH logins, and wonder if there any key-management systems which would allow us to centrally manage the access keys world-wide. The system should ...
0
votes
2answers
801 views

Redis using lots of RAM, steadily increasing until I restart it

I have a simple redis installation and it seems to slowly eat more and more ram at a steady incline until I restart the redis server. I'm using redis as a caching layer, currently I don't set an ...
0
votes
1answer
922 views

.Net SqlClient Data Provider error when comparing keys in powershell DB install

I am trying to install Databases on a new windows 7 machine with powershell code that was meant for windows xp. I have been able to fix most of the problems as I have come across them but I have been ...
9
votes
4answers
13k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
0
votes
3answers
7k views

SSL troubles - Generate .key from .crt? (AlphaSSL)

This is greatly troubling me, I have generated a .csr and .key file to send to dynadot (which sends that to AlphaSSL) with this command: openssl req -out foo.com.csr -new -newkey rsa:2048 -nodes -...
4
votes
4answers
10k views

sftp and public keys

I am trying to sftp into an a server hosted by someone else. To make sure this worked I did the standard sftp user@sftp.xxxxxx.com i was promted with the password and that worked fine. I am setting ...
4
votes
1answer
2k views

What are the Jenkins/Hudson key files for?

After I have installed Jenkins (on Windows), the program folder contains, among others, two files: identity.key (28 lines) -----BEGIN RSA PRIVATE KEY----- MIIEow...... ... -----END RSA PRIVATE KEY--...
2
votes
1answer
488 views

What is sshkeys-lint

I was following some instructions on a website, and it told me to run sshkeys-lint to check ssh keys. I never heard of sshkeys-lint and can't apt-get. Is this a typo?
1
vote
2answers
3k views

ssh login with putty key from mac

I am trying to login to a server from a Mac with a key I made with putty (Win). The output, some of which is shown below looks like it is trying , but I dont have a passphrase, so I just hit enter ...
2
votes
1answer
306 views

RPM GPG keys for RHEL6 vs older versions

Is something different about the requirements of GPG key formats in RHEL6 that is stopping my standard GPG key being imported? it installs fine on RHEL4 and RHEL5 but not RHEL6, citing the key import ...
2
votes
1answer
249 views

general ssh security - certificate authentication

I've used this article: http://developer.apple.com/library/mac/#documentation/MacOSXServer/Conceptual/XServer_ProgrammingGuide/Articles/SSH.html in order to help set up ssh certificates (I'm on mac os ...
0
votes
1answer
2k views

VirtualBox VHD Image asking for Product Key

we used the tool from MS here to create a .VHD of an old XP laptop that has some important software on it. We intend to retire the laptop and use the VM exclusively so we can back it up, and keep it ...
7
votes
3answers
975 views

SSH key management software? [closed]

I'm trying to find good software to handle SSH keys in my organization. So far I've found keymaster by Envylabs. SKM by Jerome Boismartel. Both could be option if we had only couple of users but ...
0
votes
2answers
2k views

I have the private DSA key in PEM format. What do I do next to access SSH without a password?

I have the private DSA key in PEM format. What do I do next to access SSH without a password? Sample certificate in PEM format: http://ospkibook.sourceforge.net/docs/OSPKI-2.4.7/OSPKI-html/sample-...
1
vote
0answers
126 views

Asymmetric key to import assemblies

To import the System.DirectoryServices assembly requires the following commands create asymmetric key asmKey_DirectoryServices from executable file = 'c:\Windows\Microsoft.NET\Framework\v2.0.5072 \...
0
votes
2answers
1k views

How do I configure MySQL command line client key bindings?

I often use the mysql command-line client on an Ubuntu box. It works fine, except that the key bindings are wrong. Specifically, pressing "Home", "End", or "Delete" makes it output a ~ (tilde) ...
6
votes
2answers
10k views

IIS 7.5, Encryption Keys, and HRESULT: 0x80090005

When trying to assign a domain account to an IIS 7.5 app pool I get the following error: Details: Bad Data. (Exception from HRESULT: 0x80090005) My research shows that this can happen when you copy ...
0
votes
1answer
2k views

Is it possible to convert a 1024 CSR to a 2048 CSR? (Sun ONE Webserver 6.1)

For a 2004 software combination (which means a 2004 webserver) it is letting out a CSR with a 1024 key length. The company we have been purchasing the SSLs from requires a 2048 bit key length. It it ...
1
vote
1answer
75 views

Freenx with ssh that requires keys?

Is it possible to connect to a Freenx server if ssh requires the use of keys instead of passwords? If so, how would I connect using the client?
0
votes
2answers
107 views

Leftmost column of Multi-column index not functioning as single column index

I was under the impression that an index like CREATE NONCLUSTERED INDEX IX_Name_Age ON People ( Name ASC, Age ASC ) would be used not only for a query like Select * From People WHERE Name = '...
1
vote
2answers
460 views

Can I use the same password for TrueCrypt as what I used when creating my Public Key?

I created and published a Public Key using gpg. I am now creating a TrueCrypt volume and wish to use the same password. Does knowing my public key, in this instance, make my TrueCrypt volume become ...
1
vote
2answers
220 views

User and Key Press Issues with Putty

Ubuntu Server newbie here, got some annoying issues with remote accessing my box with Putty. When I create a user and then login as that user, the terminal always starts with just '#' and not 'user@...
2
votes
2answers
1k views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
0
votes
2answers
583 views

linux ssh passphrase not working, but sftp works

I set up ssh with keys and it was working fine for a while. Ive just had a bit of a clean up and now some seriously weird things are happening, disabling terminal access from my server As I say SFTP ...
3
votes
3answers
2k views

How to stop SSH from falling back to password?

A script regularly initiates an SSH connection from one server to another, using SSH keys. However, once, the keys were briefly overwritten. This caused the SSH client to fall back to asking for a ...
1
vote
1answer
226 views

DNSSEC - First Signature

I'm testing DNSSEC with Bind 9.7.2-P2. I have a question regarding the first signature created over a zone that already exists. I'm using dynamic DNS. I create the first two keys: one KSK and one ZSK....
0
votes
2answers
131 views

Key certificate interception

What prevents someone from intercepting most/all of my communication and forge a certificate? Even if I wish to get certificates from a key server, a man-in-the-middle can intercept my request and ...
0
votes
1answer
133 views

Which is faster, key_cache or OS cache?

In a tb with 1 mil. rows if I do (after I restart the computer - so nothing it's cached): 1. SELECT price,city,state FROM tb1 WHERE zipId=13458; the result is 23rows in 0.270s after I run 'LOAD ...
3
votes
2answers
1k views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify http://httpd.apache.org/dev/...
1
vote
1answer
165 views

DNSSEC - DNSKEY RRSIG not updated

Does anybody know why the DNSKEY RRsigs are not re-signed with dynamic update?? Regards
0
votes
2answers
147 views

DNSSEC - Dynamic Update

I'm testing key rollover with Dynamic Update. I'm using Bind 9.7.1-P2. When I change the key dates with the script dnssec-settime, named doesn´t update automatically the zone file unless I reload the ...
10
votes
3answers
9k views

How can I properly sign a package I modified and recompiled?

I ran dpkg-buildpackage after getting a apt-get source nginx of a backports version of nginx and modifying debian/rules to include the uwsgi module. The last results of the command were: dpkg-deb: ...
3
votes
3answers
2k views

Two-Factor Authentication - SSH using Keys & Local Account Password

Is it possible and feasible to setup a linux box to first require a valid key file before prompting for the user's local account credentials? Our setup is that we have to open ssh on a machine to the ...
0
votes
3answers
184 views

Setting up key based authentication for root

I connect to one linux machine with a standard user account and use sudo when it is necessary to perform something a little above my users station. One of those things would be to perform a pull ...
3
votes
4answers
10k views

Why isn't my public key allowing me to sign in without a password?

On my home network I have a server running Ubuntu and another desktop running Windows 7. I'm using cygwin on the Windows machine to ssh into the server. I attempted to set up keys between these two ...
0
votes
5answers
624 views

Capistrano security

We are using Capistrano in some systems as a deploy system. The new sysadmin we have says that our setup is really dangerous and I would like to know how to fix it. We have a deploy user called "foo" ...