The tag has no wiki summary.

learn more… | top users | synonyms

-1
votes
0answers
29 views

RSA Private Key, switched Prime1/Prime2 and Exponent1/Exponent2

I have certificate issues with Firefox/Thunderbird versions newer than 31. The import fails for unknown reasons. I can import the certificate in an old version of F/T and export it again, after that ...
1
vote
1answer
28 views

Connect to server with ppk from console

i am trying to connect ubuntu server using sftp server. But the problem is i have a ppk key and i mustn't convert it to openssh. Is there a way to connect to server using ppk from command line? This ...
1
vote
1answer
150 views

SSH via terminal succeeds, but same SSH connection via Ansible fails on same machine?

Can anyone possibly shed any light on why this is happening? I am logged into machine A, the client, with user basicuser. When I try to run an ansible playbook on machine B (server machine, as ...
6
votes
2answers
639 views

How to find out if an OpenSSL certificate was created by a certain private key?

I have an OpenSSl certificate. I also need the private key. I was told it is located somewhere on the server, and true enough, I found multiple SSL key files. Before I try them all by brute force: Is ...
1
vote
1answer
110 views

Log onto Windows AD Domain via SSH using private key

I would like to log into a windows domain from a linux box using a private key in place of username/password. I am using FreeSSH on the windows box and have no problems using keys for local accounts. ...
5
votes
2answers
168 views

Passing a private key to scp from the command line instead of a file [closed]

Is there a way to pass the contents of a private key directly to the scp command instead of having to copy it to a file and pointing at it via the -i /path/to/key.pem option? So instead of doing: ...
10
votes
1answer
295 views

Does generating a CSR through IIS 7.5 on Windows Server 2008 R2 always create a new private key?

Generating a CSR for a Windows 2008 R2 server and need to ensure that the private key used for the CSR is new. I have used OpenSSL before to create my own self-signed certs for testing and if I ...
2
votes
2answers
219 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
0
votes
1answer
226 views

AWS: Difficulty changing server keys - permission denied (public key)

Struggling with a common problem. The awkward thing is I have followed the guide linked below with success before and I have fully established a working Amazon Web Services LAMP stack running Ubuntu ...
0
votes
1answer
54 views

Where to store private key on Linux build server

On my Debian 3.2.54-2 build server I'd like to sign the build artifacts (JAR files) with my private key to ensure their authenticity. I've created a private key secring.gpg using GnuPG and protected ...
2
votes
3answers
209 views

Disabled root login for SSH in Centos 5.9, key login no longer working

I have a Centos 5.9 server which I have previously configured to access via SSH key login and this has been working fine for many months. I recently had to have an issue resolved remotely which ...
3
votes
2answers
472 views

Ssh-add and contacting server unsuccessfully

I forgot how to do this procedure. I did on OSX 10.9.1 run ssh-keygen in my server moved the private-key id_rsa to my laptop's $HOME/.ssh/id_rsa, removed the private key id_rsa from my server ...
0
votes
0answers
216 views

ssh server not accepting public/private keys (Cygwin)

I am trying to connect my computer to a ssh server (running on Windows 7) using public/private keys. I have generated the keys and used the necessary permissions for files: chmod 700 .ssh chmod 600 ...
0
votes
1answer
313 views

How to generate a private/public key pair to use for a Linux server on Windows Azure?

Following Windows Azure documentation, I generated a pair of private/public keys on an Ubuntu machine using the exact comment as given: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
1
vote
0answers
92 views

Amazon EC2 pem file stopped working suddenly

I was connecting to Amazon EC2 through SSH and it was working well. But all of a sudden, it stopped working. I am not able to connect anymore with the same key file. What can go wrong ? Here's ...
0
votes
1answer
149 views

How can I add private key to windows credentials manager?

I have a linux macheen that uses a public key/private key login. I am trying to add a private key (with password) to windows 7/8 credentials manager. I use pageant right now but i would like for a ...
0
votes
2answers
1k views

SSH private key to Ubuntu works from command line but not using Remmina

I have been trying to figure out why I can't get SSH working using Remmina SSH client. In an Ubuntu 12.10 environment, I can connect with my server from the command line using openssh server, like ...
0
votes
3answers
71 views

centos private key and root login

I wanted to know if it's good practice / secure to allow login as root with ppk (private key) file. (no password). This server is only for me and no one else is working on it. Thanks, Danny
1
vote
3answers
1k views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
0
votes
1answer
379 views

Error while converting der private key to pem

I have DER private key and certificate. I need to convert them to PEM format. Certificate converted normally, but when i try to convert key this error happens: # openssl x509 -in client-key.der ...
1
vote
2answers
906 views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
0
votes
1answer
93 views

passwordless scp without keys

I am looking for some option that will allow me to accept files from any server using SCP command. I am aware of the process of creating password-less logins. But what I am looking for is an option on ...
-1
votes
1answer
2k views

Openssl, my private key is either missing or lost

I am trying to setup ssl on my webserver for https. I have come to a point where it seems all I am missing is my private key. I initially followed this guide ...
0
votes
2answers
119 views

Connecting to a remote server using SSH from a Mac

I have generated a public key file (id_rsa.pub) and a private key file (id_rsa) and placed them in my ~/.ssh folder According to the server admin, he has already added "my key" to the server for ...
2
votes
2answers
3k views

Why can't I ssh into my server using my private key?

I just setup my new server as I used to, and this time I can't login using my private key. The server is ubuntu 11.04. And I have setup following ssh key directories. root@myserv: ls -la drwx------ ...
1
vote
1answer
290 views

Vim SCP parameter with private public key pair

Currently, I am trying to edit a file on a remote server using Vim's built-in netrw plugin. I can SSH fine into my Amazon EC2 server using a command like this: ssh -i <keyfile> ...
0
votes
2answers
693 views

Is a SSL key file binary?

I'm trying to install a SSL with my nginx setup. I configured nginx with those two files, but it doesn't work. Nginx complained the following error message. SSL: error:0906D06C:PEM ...
4
votes
3answers
2k views

SSH does not allow the use of a key with group readable permissions

I have a development git server that deploys to a live server when the live branch is pushed to. Every user has their own login and therefore the post-receive hook which does the live deployment is ...
17
votes
4answers
2k views

Why does Amazon release private keys instead of public keys?

My brain is wrapped around the axle on public and private keys. When you create a cloud server (instance) on Amazon's EC2 service and then want to connect to it via SSH, Amazon requires you to ...
3
votes
4answers
8k views

certutil: function failed: security library: bad database.

when I'm using certutil it returns this error: certutil: function failed: security library: bad database. e.g. I can't list certs or keys How Can I fix this? Thanks
1
vote
1answer
909 views

Exim DKIM Error: DKIM: signing failed (RC -101) no matter what private key I try

I have this problem with Exim. DKIM fails on signing outgoing mails. This is the /var/log/exim4/mainlog output (Debian Squeeze): 2012-08-02 17:11:33 1Sx1k5-0004Tk-9D <= me@my_domain.com U=me ...
0
votes
1answer
105 views

Disabled password authentication with SSH, key had invalid permissions

Is there any way I can get access to my server back without using SSH to log in? my private keys had the incorrect permissions and now I can't log in.
4
votes
1answer
3k views

Does openssl always encrypt the private key?

When using openssl 0.9.8 to create a new self-signed cert+key, there is a -nodes parameter that can be used to tell openssl to not encrypt the private key it creates. For example: openssl req -x509 ...
2
votes
1answer
208 views

Changing RSA passphrase on Windows with TortoiseGit auxiliary programs?

We have designers who are on PCs and are starting to use our git version control repositories. we are using rsa keys to allow them to connect, and TortoiseGit as the interface. Everything is working ...
0
votes
3answers
219 views

How to use the correct SSH private key?

I have a private key inside /home/myuser/.ssh/privateKey I have a problem connecting to the ssh server, because i always get: Permission denied (publickey). I tried to debug the problem and i find ...
3
votes
1answer
2k views

What are the risks in backing up private keys on services like Dropbox?

I have a couple of private keys that I use to administer Amazon EC2 instances. I recently lost these keys when I did a re-install of my computer and I found out that the CD-RW I'd backed them up to ...
1
vote
1answer
208 views

Changing an IPSec pre-shared key without bringing down the tunnel (too long)

How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
2
votes
1answer
561 views

Extract private key from Domino keyring

I'm trying to use a multipurpose certificate on an infrastucture that contains a Domino 7 server. To accomplish this, I tried: Generate a CSR outside of Domino: I'm able to use the produced ...
5
votes
2answers
2k views

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A ...
3
votes
1answer
498 views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
4
votes
1answer
272 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
22
votes
5answers
2k views

How to secure your CA's private key?

I'm about to implement my own Certification Authority (CA) for interal use only. Now there is a problem, that the CA private should never ever be exploited. So right now the private key is encrypted. ...
2
votes
2answers
2k views

Where Is an SSL Private Key Stored?

My particular situation applies to Windows but I welcome knowing how this would differ from other practical applications. The subsets contain information that I'm basing my logic on, please correct ...
8
votes
4answers
11k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
0
votes
2answers
475 views

ssh with key login failed from Mac OSX to CentOS 5 remote server

I'm trying to setup passwordless login for from my mac to my remote server running CentOS with public key authentication for "user1". I used $ ssh-keygen -t rsa to setup a public key on my mac and ...
5
votes
3answers
291 views

how to prevent a user using private key after leaving organization?

In the enterprise environment, each user was issue a key pair for using to encrypting/signing. Since they have the private key, that mean they can decrypt any file that encrypt for them, even after ...
1
vote
2answers
2k views

How to delete the private key associated with a certificate windows 7

I am trying to reimport a certificate, except this time i want to import it with an exportable private key. I have the sneaking suspicion that since windows 7 does not actually delete the private key ...
2
votes
2answers
119 views

SSH backup server - connect to multiple passwordless remotes

I'm wondering what are the steps to configure password-less ssh keys so I can connect and pull data from multiple remote servers. Can I just do: Backup Machine: ssh-keygen -t rsa ssh-copy-id -i ...
2
votes
1answer
2k views

How can I use an SSL certificate generated with Java keytool with Nginx?

I used the Java keytool to generate a "keystore": keytool -genkey -alias example.com -keyalg RSA -keystore example.com.keystore Then I generated a CSR (Certificate Signing Request): keytool ...
3
votes
2answers
4k views

Entering Private Key Passphrase with Putty Command Line PSFTP.exe

I'm using psftp.exe to automate a file download but need to connect with a private key as explained below. I am able to connect, however, the private key requires a Passphrase. This procedure works ...