The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
3answers
99 views

centos private key and root login

I wanted to know if it's good practice / secure to allow login as root with ppk (private key) file. (no password). This server is only for me and no one else is working on it. Thanks, Danny
4
votes
3answers
4k views

SSH does not allow the use of a key with group readable permissions

I have a development git server that deploys to a live server when the live branch is pushed to. Every user has their own login and therefore the post-receive hook which does the live deployment is ...
3
votes
3answers
3k views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
0
votes
1answer
689 views

Error while converting der private key to pem

I have DER private key and certificate. I need to convert them to PEM format. Certificate converted normally, but when i try to convert key this error happens: # openssl x509 -in client-key.der ...
1
vote
2answers
2k views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
0
votes
1answer
154 views

passwordless scp without keys

I am looking for some option that will allow me to accept files from any server using SCP command. I am aware of the process of creating password-less logins. But what I am looking for is an option on ...
3
votes
1answer
6k views

Where Is an SSL Private Key Stored?

My particular situation applies to Windows but I welcome knowing how this would differ from other practical applications. The subsets contain information that I'm basing my logic on, please correct ...
0
votes
1answer
4k views

Openssl, my private key is either missing or lost

I am trying to setup ssl on my webserver for https. I have come to a point where it seems all I am missing is my private key. I initially followed this guide ...
17
votes
4answers
3k views

Why does Amazon release private keys instead of public keys?

My brain is wrapped around the axle on public and private keys. When you create a cloud server (instance) on Amazon's EC2 service and then want to connect to it via SSH, Amazon requires you to ...
2
votes
1answer
803 views

Extract private key from Domino keyring

I'm trying to use a multipurpose certificate on an infrastucture that contains a Domino 7 server. To accomplish this, I tried: Generate a CSR outside of Domino: I'm able to use the produced ...
0
votes
2answers
125 views

Connecting to a remote server using SSH from a Mac

I have generated a public key file (id_rsa.pub) and a private key file (id_rsa) and placed them in my ~/.ssh folder According to the server admin, he has already added "my key" to the server for ...
1
vote
1answer
505 views

Vim SCP parameter with private public key pair

Currently, I am trying to edit a file on a remote server using Vim's built-in netrw plugin. I can SSH fine into my Amazon EC2 server using a command like this: ssh -i <keyfile> ...
0
votes
2answers
855 views

Is a SSL key file binary?

I'm trying to install a SSL with my nginx setup. I configured nginx with those two files, but it doesn't work. Nginx complained the following error message. SSL: error:0906D06C:PEM ...
2
votes
1answer
1k views

Exim DKIM Error: DKIM: signing failed (RC -101) no matter what private key I try

I have this problem with Exim. DKIM fails on signing outgoing mails. This is the /var/log/exim4/mainlog output (Debian Squeeze): 2012-08-02 17:11:33 1Sx1k5-0004Tk-9D <= me@my_domain.com U=me ...
0
votes
1answer
119 views

Disabled password authentication with SSH, key had invalid permissions

Is there any way I can get access to my server back without using SSH to log in? my private keys had the incorrect permissions and now I can't log in.
4
votes
1answer
4k views

Does openssl always encrypt the private key?

When using openssl 0.9.8 to create a new self-signed cert+key, there is a -nodes parameter that can be used to tell openssl to not encrypt the private key it creates. For example: openssl req -x509 ...
2
votes
1answer
275 views

Changing RSA passphrase on Windows with TortoiseGit auxiliary programs?

We have designers who are on PCs and are starting to use our git version control repositories. we are using rsa keys to allow them to connect, and TortoiseGit as the interface. Everything is working ...
0
votes
3answers
238 views

How to use the correct SSH private key?

I have a private key inside /home/myuser/.ssh/privateKey I have a problem connecting to the ssh server, because i always get: Permission denied (publickey). I tried to debug the problem and i find ...
4
votes
1answer
3k views

What are the risks in backing up private keys on services like Dropbox?

I have a couple of private keys that I use to administer Amazon EC2 instances. I recently lost these keys when I did a re-install of my computer and I found out that the CD-RW I'd backed them up to ...
1
vote
1answer
301 views

Changing an IPSec pre-shared key without bringing down the tunnel (too long)

How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
4
votes
1answer
440 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
8
votes
2answers
3k views

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A ...
23
votes
5answers
3k views

How to secure your CA's private key?

I'm about to implement my own Certification Authority (CA) for interal use only. Now there is a problem, that the CA private should never ever be exploited. So right now the private key is encrypted. ...
5
votes
2answers
2k views

Easy multi-level authentication for sudo

I have a FreeBSD server with password-based SSH enabled. I would like to enable sudo, but I do not want a potential attacker to be one password away from root access. My current solution is logging ...
5
votes
3answers
298 views

how to prevent a user using private key after leaving organization?

In the enterprise environment, each user was issue a key pair for using to encrypting/signing. Since they have the private key, that mean they can decrypt any file that encrypt for them, even after ...
1
vote
2answers
820 views

ssh with key login failed from Mac OSX to CentOS 5 remote server

I'm trying to setup passwordless login for from my mac to my remote server running CentOS with public key authentication for "user1". I used $ ssh-keygen -t rsa to setup a public key on my mac and ...
2
votes
1answer
489 views

Hardware Security Module (HSM)

Looking to purchase an HSM to manage private keys, and price/scalability-price is one of my main concerns. It does need to be FIPS 140-2, level 3 certified (or compliant at least) and it must be ...
2
votes
2answers
125 views

SSH backup server - connect to multiple passwordless remotes

I'm wondering what are the steps to configure password-less ssh keys so I can connect and pull data from multiple remote servers. Can I just do: Backup Machine: ssh-keygen -t rsa ssh-copy-id -i ...
2
votes
1answer
3k views

How can I use an SSL certificate generated with Java keytool with Nginx?

I used the Java keytool to generate a "keystore": keytool -genkey -alias example.com -keyalg RSA -keystore example.com.keystore Then I generated a CSR (Certificate Signing Request): keytool ...
3
votes
2answers
9k views

Entering Private Key Passphrase with Putty Command Line PSFTP.exe

I'm using psftp.exe to automate a file download but need to connect with a private key as explained below. I am able to connect, however, the private key requires a Passphrase. This procedure works ...
0
votes
1answer
332 views

EC2 instances keep becoming inaccessible via SSH, what could issue be? Can I use elastic loadbalancer to check SSH connectivity?

This is mainly an issue for my development ec2 server as it seems that my instance keeps becoming inaccessible via SSH. It happened yesterday so I killed that one and started a new one and happened ...
1
vote
1answer
2k views

Error while decrypting https traffic in Wireshark

I configured Jetty with a self-generated private key and cert after a long struggle. Now, I'm having trouble decrypting the HTTPS traffic from the Jetty server that I captured for inspection. The ...
4
votes
1answer
681 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
1
vote
3answers
292 views

Simple SSH public/private key question

I am trying to learn this instead of just following guides so I can recommend proper actions when people do ask (and they do). Here is what I got down. First, generate both key with command such as ...
0
votes
1answer
279 views

Is it safe to share easy-rsa keys between machines? How?

I have two vpn hosts, vpn1 being the primary, vpn2 being a hot failover machine for cases where vpn1 goes down, either planned or unplanned. Right now, we manage client keys using the easy-rsa shell ...
1
vote
1answer
1k views

What's the connection between an AWS EC2 AMI's private key and the ~/.ssh/authorized_keys?

I have an EC2 instance running with a keypair that I don't have access to the private key of. I am currently accessing the instance freely thanks to having the public key of my own custom keypair ...
1
vote
1answer
1k views

need to manage private keys in windows 2003 server

I have installed a X.509 certificate into IIS 6.0 on Windows Server 2003. I would like to give the IIS user accesss to the certificate's private key. I can do this on Windows 7 IIS manager very ...
3
votes
1answer
3k views

Private key authentication with pam_ldap

I'd like to set up pam_ldap on some of our servers so that we can centrally manage who has access to which server, and easily revoke access if e.g. someone leaves the company. I've done some research ...
3
votes
1answer
211 views

Authentication using SSL certificates — General Question

SSL client authentication using certificates -- it's a complex topic, and I think I've learned just enough to make it even more complex. Here is my basic understanding: A public and private key are ...
2
votes
2answers
2k views

Importing SSL certificates on Win2k3 / IIS 6.0

As part of a large site migration, I need to copy over numerous (about 50) SSL certificates for different sites. I have tried to export them on the current server and then import them on the new ...
11
votes
5answers
5k views

Bypass ssh key file permission check

I have an encrypted FAT volume (for compatibility) containing a private key file and other sensitive data. I want to connect to my server through SSH using my private key, but of course, as FAT ...
5
votes
2answers
4k views

How do I setup ssh with both private key and password?

How do I setup ssh with both private key and password? In /etc/ssh/sshd_config, I currently have: RSAAuthentication yes PubkeyAuthentication yes PasswordAuthentication yes But apparently this ...
1
vote
2answers
116 views

Being Prompted for Password

// Begin edit I should note now that I've tinkered around a bit more, that everything works as intended if I use the "-i identity_file" switch when connecting from "Automation" and point that at the ...