The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
2answers
157 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
0
votes
1answer
32 views

AWS: Difficulty changing server keys - permission denied (public key)

Struggling with a common problem. The awkward thing is I have followed the guide linked below with success before and I have fully established a working Amazon Web Services LAMP stack running Ubuntu ...
0
votes
1answer
27 views

Where to store private key on Linux build server

On my Debian 3.2.54-2 build server I'd like to sign the build artifacts (JAR files) with my private key to ensure their authenticity. I've created a private key secring.gpg using GnuPG and protected ...
2
votes
3answers
85 views

Disabled root login for SSH in Centos 5.9, key login no longer working

I have a Centos 5.9 server which I have previously configured to access via SSH key login and this has been working fine for many months. I recently had to have an issue resolved remotely which ...
3
votes
2answers
108 views

Ssh-add and contacting server unsuccessfully

I forgot how to do this procedure. I did on OSX 10.9.1 run ssh-keygen in my server moved the private-key id_rsa to my laptop's $HOME/.ssh/id_rsa, removed the private key id_rsa from my server ...
0
votes
0answers
73 views

ssh server not accepting public/private keys (Cygwin)

I am trying to connect my computer to a ssh server (running on Windows 7) using public/private keys. I have generated the keys and used the necessary permissions for files: chmod 700 .ssh chmod 600 ...
0
votes
1answer
139 views

How to generate a private/public key pair to use for a Linux server on Windows Azure?

Following Windows Azure documentation, I generated a pair of private/public keys on an Ubuntu machine using the exact comment as given: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
0
votes
0answers
29 views

Amazon EC2 pem file stopped working suddenly

I was connecting to Amazon EC2 through SSH and it was working well. But all of a sudden, it stopped working. I am not able to connect anymore with the same key file. What can go wrong ? Here's ...
0
votes
1answer
83 views

How can I add private key to windows credentials manager?

I have a linux macheen that uses a public key/private key login. I am trying to add a private key (with password) to windows 7/8 credentials manager. I use pageant right now but i would like for a ...
0
votes
2answers
435 views

SSH private key to Ubuntu works from command line but not using Remmina

I have been trying to figure out why I can't get SSH working using Remmina SSH client. In an Ubuntu 12.10 environment, I can connect with my server from the command line using openssh server, like ...
0
votes
3answers
57 views

centos private key and root login

I wanted to know if it's good practice / secure to allow login as root with ppk (private key) file. (no password). This server is only for me and no one else is working on it. Thanks, Danny
1
vote
3answers
472 views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
0
votes
1answer
272 views

Error while converting der private key to pem

I have DER private key and certificate. I need to convert them to PEM format. Certificate converted normally, but when i try to convert key this error happens: # openssl x509 -in client-key.der ...
1
vote
2answers
672 views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
0
votes
1answer
86 views

passwordless scp without keys

I am looking for some option that will allow me to accept files from any server using SCP command. I am aware of the process of creating password-less logins. But what I am looking for is an option on ...
-1
votes
1answer
2k views

Openssl, my private key is either missing or lost

I am trying to setup ssl on my webserver for https. I have come to a point where it seems all I am missing is my private key. I initially followed this guide ...
0
votes
2answers
114 views

Connecting to a remote server using SSH from a Mac

I have generated a public key file (id_rsa.pub) and a private key file (id_rsa) and placed them in my ~/.ssh folder According to the server admin, he has already added "my key" to the server for ...
1
vote
2answers
2k views

Why can't I ssh into my server using my private key?

I just setup my new server as I used to, and this time I can't login using my private key. The server is ubuntu 11.04. And I have setup following ssh key directories. root@myserv: ls -la drwx------ ...
1
vote
1answer
230 views

Vim SCP parameter with private public key pair

Currently, I am trying to edit a file on a remote server using Vim's built-in netrw plugin. I can SSH fine into my Amazon EC2 server using a command like this: ssh -i <keyfile> ...
0
votes
2answers
629 views

Is a SSL key file binary?

I'm trying to install a SSL with my nginx setup. I configured nginx with those two files, but it doesn't work. Nginx complained the following error message. SSL: error:0906D06C:PEM ...
3
votes
3answers
1k views

SSH does not allow the use of a key with group readable permissions

I have a development git server that deploys to a live server when the live branch is pushed to. Every user has their own login and therefore the post-receive hook which does the live deployment is ...
15
votes
4answers
2k views

Why does Amazon release private keys instead of public keys?

My brain is wrapped around the axle on public and private keys. When you create a cloud server (instance) on Amazon's EC2 service and then want to connect to it via SSH, Amazon requires you to ...
2
votes
4answers
5k views

certutil: function failed: security library: bad database.

when I'm using certutil it returns this error: certutil: function failed: security library: bad database. e.g. I can't list certs or keys How Can I fix this? Thanks
0
votes
1answer
727 views

Exim DKIM Error: DKIM: signing failed (RC -101) no matter what private key I try

I have this problem with Exim. DKIM fails on signing outgoing mails. This is the /var/log/exim4/mainlog output (Debian Squeeze): 2012-08-02 17:11:33 1Sx1k5-0004Tk-9D <= me@my_domain.com U=me ...
0
votes
1answer
92 views

Disabled password authentication with SSH, key had invalid permissions

Is there any way I can get access to my server back without using SSH to log in? my private keys had the incorrect permissions and now I can't log in.
4
votes
1answer
2k views

Does openssl always encrypt the private key?

When using openssl 0.9.8 to create a new self-signed cert+key, there is a -nodes parameter that can be used to tell openssl to not encrypt the private key it creates. For example: openssl req -x509 ...
2
votes
1answer
172 views

Changing RSA passphrase on Windows with TortoiseGit auxiliary programs?

We have designers who are on PCs and are starting to use our git version control repositories. we are using rsa keys to allow them to connect, and TortoiseGit as the interface. Everything is working ...
0
votes
3answers
211 views

How to use the correct SSH private key?

I have a private key inside /home/myuser/.ssh/privateKey I have a problem connecting to the ssh server, because i always get: Permission denied (publickey). I tried to debug the problem and i find ...
3
votes
1answer
1k views

What are the risks in backing up private keys on services like Dropbox?

I have a couple of private keys that I use to administer Amazon EC2 instances. I recently lost these keys when I did a re-install of my computer and I found out that the CD-RW I'd backed them up to ...
1
vote
1answer
159 views

Changing an IPSec pre-shared key without bringing down the tunnel (too long)

How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
2
votes
1answer
454 views

Extract private key from Domino keyring

I'm trying to use a multipurpose certificate on an infrastucture that contains a Domino 7 server. To accomplish this, I tried: Generate a CSR outside of Domino: I'm able to use the produced ...
2
votes
2answers
1k views

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A ...
1
vote
0answers
280 views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
4
votes
1answer
212 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
20
votes
5answers
1k views

How to secure your CA's private key?

I'm about to implement my own Certification Authority (CA) for interal use only. Now there is a problem, that the CA private should never ever be exploited. So right now the private key is encrypted. ...
2
votes
2answers
1k views

Where Is an SSL Private Key Stored?

My particular situation applies to Windows but I welcome knowing how this would differ from other practical applications. The subsets contain information that I'm basing my logic on, please correct ...
7
votes
4answers
9k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
0
votes
2answers
375 views

ssh with key login failed from Mac OSX to CentOS 5 remote server

I'm trying to setup passwordless login for from my mac to my remote server running CentOS with public key authentication for "user1". I used $ ssh-keygen -t rsa to setup a public key on my mac and ...
5
votes
3answers
286 views

how to prevent a user using private key after leaving organization?

In the enterprise environment, each user was issue a key pair for using to encrypting/signing. Since they have the private key, that mean they can decrypt any file that encrypt for them, even after ...
0
votes
2answers
1k views

How to delete the private key associated with a certificate windows 7

I am trying to reimport a certificate, except this time i want to import it with an exportable private key. I have the sneaking suspicion that since windows 7 does not actually delete the private key ...
2
votes
2answers
118 views

SSH backup server - connect to multiple passwordless remotes

I'm wondering what are the steps to configure password-less ssh keys so I can connect and pull data from multiple remote servers. Can I just do: Backup Machine: ssh-keygen -t rsa ssh-copy-id -i ...
2
votes
1answer
1k views

How can I use an SSL certificate generated with Java keytool with Nginx?

I used the Java keytool to generate a "keystore": keytool -genkey -alias example.com -keyalg RSA -keystore example.com.keystore Then I generated a CSR (Certificate Signing Request): keytool ...
2
votes
2answers
2k views

Entering Private Key Passphrase with Putty Command Line PSFTP.exe

I'm using psftp.exe to automate a file download but need to connect with a private key as explained below. I am able to connect, however, the private key requires a Passphrase. This procedure works ...
0
votes
2answers
3k views

strongSwan - how do i generate pre shared keys?

I'm using the strongswan documentation right here I've added to /etc/ipsec.secrets the following line: : RSA moonKey.pem "SomePwd" however i don't know how to create moonKey.pem. Any ideas? this ...
0
votes
1answer
253 views

EC2 instances keep becoming inaccessible via SSH, what could issue be? Can I use elastic loadbalancer to check SSH connectivity?

This is mainly an issue for my development ec2 server as it seems that my instance keeps becoming inaccessible via SSH. It happened yesterday so I killed that one and started a new one and happened ...
1
vote
1answer
1k views

Error while decrypting https traffic in Wireshark

I configured Jetty with a self-generated private key and cert after a long struggle. Now, I'm having trouble decrypting the HTTPS traffic from the Jetty server that I captured for inspection. The ...
4
votes
1answer
522 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
1
vote
3answers
234 views

Simple SSH public/private key question

I am trying to learn this instead of just following guides so I can recommend proper actions when people do ask (and they do). Here is what I got down. First, generate both key with command such as ...
2
votes
1answer
382 views

Hardware Security Module (HSM)

Looking to purchase an HSM to manage private keys, and price/scalability-price is one of my main concerns. It does need to be FIPS 140-2, level 3 certified (or compliant at least) and it must be ...
0
votes
1answer
200 views

Is it safe to share easy-rsa keys between machines? How?

I have two vpn hosts, vpn1 being the primary, vpn2 being a hot failover machine for cases where vpn1 goes down, either planned or unplanned. Right now, we manage client keys using the easy-rsa shell ...