The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
7 views

Restricting upload with SKS server

I'm considering setting up a keyserver with sks on Debian. I want anyone to be able to retrieve my key from it, but I don't want anyone to be able to add their key. How can I do that? I can't seem ...
0
votes
2answers
261 views

HOw to make rsa key pairs work in CentOS 6

I am unable to make rsa key pair authentication work on my CentOS 6.2 vps. My understanding is that if rsa authentication is properly configured no password will be requested yet it is still required ...
3
votes
1answer
976 views

Can an AWS CloudFormation create a KeyPair to subsequently use when starting instances?

I would like to launch my stack using a keypair that is created as part of the CloudFormation. Is that possible? .... "Resources": { "ReverseProxyKeyPair": { "Type": ...
1
vote
1answer
212 views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...
1
vote
0answers
20 views

Recommendations for DNSSEC key metadata

In order to implement auto-dnssec maintain in the 9.7+ versions of BIND, one adds dates to the keys as metadata. After a lot of reading, I've come up with the following and hope that someone can ...
7
votes
2answers
2k views

SSH keys management system

I'm looking to switch from password based (which I starting to become overwhelmed with) to SSH keys based system. I'd like to know if there any SSH keys management system or server solution, which ...
23
votes
2answers
25k views

public key authentication fails ONLY when sshd is daemon

I have no clue on how this happens. The distro is Scientific Linux 6.1 and everything is set up to perform authentication via public key. Yet, when sshd is running as a daemon (service sshd start), it ...
0
votes
0answers
31 views

Generating an azure .pem file that has a passphrase?

So I've been trying to create a .pem file to securely access my server in Azure, but when I run this command in the terminal, which is from their help documents.. openssl req -x509 -nodes -days 365 ...
0
votes
2answers
124 views

Key certificate interception

What prevents someone from intercepting most/all of my communication and forge a certificate? Even if I wish to get certificates from a key server, a man-in-the-middle can intercept my request and ...
0
votes
1answer
2k views

Is it possible to convert a 1024 CSR to a 2048 CSR? (Sun ONE Webserver 6.1)

For a 2004 software combination (which means a 2004 webserver) it is letting out a CSR with a 1024 key length. The company we have been purchasing the SSLs from requires a 2048 bit key length. It it ...
1
vote
1answer
266 views

DNSSEC sign-zone results in fatal failure

I have a working DNS in a VM-env for testing and learning purposes. It's a complete server from root-domain and a couple of subdomains. I've added dnssec-enable yes; into named.conf, and also ...
3
votes
1answer
4k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
-2
votes
1answer
1k views

find or locate Windows Server 2008 R2 volume license key [closed]

Need help to find and locate Windows Server 2008 R2 volume license keys from the system registry, to document what keys are with which server. I have tried Magic Jelly Bean and Produkey, but both will ...
0
votes
0answers
38 views

EC2 Create new Linux user(s) with their OWN Key Pairs?

In EC2, i spinned a CentOS v6.5 instance, and i got a Key Pair as well (of course). But the problem is, i hoped it would be like as usual before that it would creates the ec2-user user, so that i can ...
1
vote
2answers
703 views

Deleting a Key Pair for AWS EC2 Instance with EBS

I have an AWS EC2 Instance using EBS and I want to stop the use of the current private key, and use a new one. As I understand it, merely deleting the key pair on the AWS Console just deletes the ...
0
votes
1answer
312 views

Configuring Redhat / CentOS 5 SSH to authenticate to IPA server with public keys

I'm trying to configure some Red Hat/CentOS servers to use an ipa-server on CentOS 6 for SSH authentication with public keys. I'm storing the public keys on the IPA server, which works great on ...
23
votes
4answers
7k views

Centralized management system for SSH keys?

We are looking to switch to key-based management of SSH logins, and wonder if there any key-management systems which would allow us to centrally manage the access keys world-wide. The system should ...
1
vote
2answers
219 views

sshd helper program on access to authorized_keys

second question, second problem: I am searching for a way to dynamically let sshd search for public keys on my server. So, shortly spoken, I want, when authorized_keys is accessed by sshd, a helper ...
-2
votes
1answer
268 views

Speedup of fixing an openssl bug with 8192 bit key [closed]

This is related to this Bug-Report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453 OpenSSL contains a set of arbitrary limitations on the size of accepted key parameters that ...
2
votes
1answer
31 views

Using puppet to manage ntpd certificates

My company is requiring me to implement signed time in ntpd with autokey. One of the requirements for autokey to work is to generate keys on each host. All the clients are part of the same group so ...
3
votes
2answers
5k views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
9
votes
15answers
3k views

How to manage rack keys?

As a result of a security audit there's the need to lock the racks and manage the keys: Keep the keys safe Record key usage Complying with these two requirements has many challenges as there are a ...
0
votes
3answers
4k views

SSL troubles - Generate .key from .crt? (AlphaSSL)

This is greatly troubling me, I have generated a .csr and .key file to send to dynadot (which sends that to AlphaSSL) with this command: openssl req -out foo.com.csr -new -newkey rsa:2048 -nodes ...
0
votes
3answers
2k views

OpenVPN server throws an “access denied” error

OpenVPN refuses to start up and exists with this error ever since i upgraded Ubuntu from 1.04 to 11.10 Dec 14 19:12:38 oogle ovpn-server[32150]: OpenVPN 2.2.0 i686-linux-gnu [SSL] [LZO2] [EPOLL] ...
3
votes
1answer
63 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
3
votes
1answer
1k views

where does rpm install custom gpg keys?

Where does CentOS/RHEL 6 store custom gpg keys? I thought /etc/pki/rpm-gpg but I installed nginx's key but unable to find it. I see it was imported properly but where is it? wget ...
3
votes
4answers
8k views

Why isn't my public key allowing me to sign in without a password?

On my home network I have a server running Ubuntu and another desktop running Windows 7. I'm using cygwin on the Windows machine to ssh into the server. I attempted to set up keys between these two ...
0
votes
1answer
724 views

synology nas DS213 J rsync files from ubuntu 12.04 server

I´ve a Synology DS213 J Nas System. I´m trying to sync folders from a ubuntu 12.04 webserver to the nas without password prompt. therefore I logged into the nas via terminal with root account. ...
2
votes
1answer
994 views

Radius + SSH Key Authentication

Does anyone know if it is possible to configure pam to require both radius AND ssh-key to successfully authenticate ?
2
votes
2answers
715 views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
-1
votes
1answer
28 views

Getting error while running apt-get update

I am getting the following error while running apt-get update on all of the servers. W: A error occurred during the signature verification. The repository is not updated and the previous index files ...
0
votes
0answers
49 views

Can somebody read the challenge password value from client.key, if he get my client.key file?

Can somebody read the challenge password value from client.key if he get my client.key file? This is about easy-rsa, it comes with OpenVPN
5
votes
2answers
9k views

IIS 7.5, Encryption Keys, and HRESULT: 0x80090005

When trying to assign a domain account to an IIS 7.5 app pool I get the following error: Details: Bad Data. (Exception from HRESULT: 0x80090005) My research shows that this can happen when you copy ...
1
vote
1answer
149 views

Forgot passphrase for new SSL certificate

I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits. I generated a key, CSR and got the certificate back from RapidSSL. Now, somehow, I've forgotten what Passphrase I used when ...
1
vote
2answers
108 views

SSH: How to know when an RSA key has been trusted?

my laptop apparently has changed its RSA key, so when I connect to it over SSH, I get the message of REMOTE HOST IDENTIFICATION HAS CHANGED. I don't remember if the last time I've connected to my ...
2
votes
1answer
2k views

How can I use the home, end, page-up, page-down keys on Solaris via PuTTY?

I love the shortcuts home, end, page-up, page-down, but I am unable to use them via PuTTY on Solaris servers. Windows PuTTY => Linux desktop via SSH, works fine. Windows PuTTY => Solaris ...
0
votes
1answer
54 views

Web service for checking out / leasing a token

I run a web site on AWS that has a number of web servers (say 4 of them) running behind a load balancer. For this particular web site, I have one license key of New Relic for doing instrumentation. ...
2
votes
1answer
602 views

Wowza on EC2 Set up and Questions

I have a wowza instance installed and running on EC2, but I can't find the keypair file. I am trying to install another wowza instance on a different aws account. I have the following questions, I'd ...
8
votes
4answers
12k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
0
votes
2answers
286 views

No authorized_hosts file created`

I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
0
votes
1answer
78 views

I have changed my server, Do I need to re generate the ssl key

I am using AWS for hosting. I have got one productions instance and pre-production instance in it. I have installed ssl to the production site. But unfortunately its crashed. So we cloned the ...
7
votes
3answers
912 views

SSH key management software? [closed]

I'm trying to find good software to handle SSH keys in my organization. So far I've found keymaster by Envylabs. SKM by Jerome Boismartel. Both could be option if we had only couple of users but ...
31
votes
8answers
5k views

What are best practices for managing SSH keys in a team?

I work with small teams (<10) of developers and admins with the following characteristics: Most members of the team have >1 personal computer, most of which are portable Team members have access ...
0
votes
0answers
152 views

Custom certificate/key pair does not work on OpenVPN clients

I have setup very basic OpenVPN network on Windows Server 2008. My clients are IP Cameras having Unix OS and built-in feature of openVPN connectivity. Initially I used a common client certificate/key ...
0
votes
2answers
162 views

SSH:using single public key on multiple remote machines and spoofing-by-known-server

Lyrics Usually, people say, that using single public key on several servers is just as secure as using unique public keys on each of them. (If we're not talking about possibility of private key being ...
-2
votes
2answers
176 views

Windows key database for WDS [closed]

I wonder if there is any solution to have windows key database and use it in Windows Deployment process. If you know some or how please share
3
votes
1answer
1k views

[Shift]+[F1] not working in putty telnet sessions

Update: I configured putty (Windows 8; x64) to send exactly the same data as an old 16 bit Hyperterminal (Windows XP). I tested it using Wireshark. But still the Software on the Suse Server does not ...
1
vote
1answer
58 views

Multiple identical GPG Keys. What can cause that?

I'm using OpsCode Chef to manage all my VMs, but since the last week, I'm having issues with one VM. When running chef, it hangs right at the beginning. After a bit of investigation, I found out that ...
0
votes
4answers
4k views

How to make connection between two computers using ssh-keygen

I want to use rsync command between two computers and both of them have RedHat 5.3 , when I googled for way to make that, I discovered that I have to make public key between them to not prompt ...
1
vote
2answers
118 views

breach in my machine [duplicate]

Possible Duplicate: My server’s been hacked EMERGENCY Suddenly, ssh claims that the key on my server is changed. Even freenx doesn't accept my connections no more because of the changed ...