The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
609 views

ssh server not accepting public/private keys (Cygwin)

I am trying to connect my computer to a ssh server (running on Windows 7) using public/private keys. I have generated the keys and used the necessary permissions for files: chmod 700 .ssh chmod 600 ...
0
votes
1answer
769 views

How to generate a private/public key pair to use for a Linux server on Windows Azure?

Following Windows Azure documentation, I generated a pair of private/public keys on an Ubuntu machine using the exact comment as given: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
1
vote
0answers
470 views

Amazon EC2 pem file stopped working suddenly

I was connecting to Amazon EC2 through SSH and it was working well. But all of a sudden, it stopped working. I am not able to connect anymore with the same key file. What can go wrong ? Here's ...
1
vote
1answer
440 views

How can I add private key to windows credentials manager?

I have a linux macheen that uses a public key/private key login. I am trying to add a private key (with password) to windows 7/8 credentials manager. I use pageant right now but i would like for a ...
1
vote
2answers
4k views

How to delete the private key associated with a certificate windows 7

I am trying to reimport a certificate, except this time i want to import it with an exportable private key. I have the sneaking suspicion that since windows 7 does not actually delete the private key ...
3
votes
5answers
8k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
8
votes
5answers
4k views

Stop ssh client from offering all the public keys it can find?

Like most sysadmins I use openssh all the time. I have about a dozen ssh keys, I like to have a different ssh key for each host. However this causes a problem when I am connecting to a host for the ...
9
votes
4answers
13k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
0
votes
3answers
101 views

centos private key and root login

I wanted to know if it's good practice / secure to allow login as root with ppk (private key) file. (no password). This server is only for me and no one else is working on it. Thanks, Danny
4
votes
3answers
4k views

SSH does not allow the use of a key with group readable permissions

I have a development git server that deploys to a live server when the live branch is pushed to. Every user has their own login and therefore the post-receive hook which does the live deployment is ...
3
votes
3answers
4k views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
0
votes
1answer
747 views

Error while converting der private key to pem

I have DER private key and certificate. I need to convert them to PEM format. Certificate converted normally, but when i try to convert key this error happens: # openssl x509 -in client-key.der ...
1
vote
2answers
2k views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
0
votes
1answer
159 views

passwordless scp without keys

I am looking for some option that will allow me to accept files from any server using SCP command. I am aware of the process of creating password-less logins. But what I am looking for is an option on ...
3
votes
1answer
7k views

Where Is an SSL Private Key Stored?

My particular situation applies to Windows but I welcome knowing how this would differ from other practical applications. The subsets contain information that I'm basing my logic on, please correct ...
0
votes
1answer
4k views

Openssl, my private key is either missing or lost

I am trying to setup ssl on my webserver for https. I have come to a point where it seems all I am missing is my private key. I initially followed this guide ...
17
votes
4answers
3k views

Why does Amazon release private keys instead of public keys?

My brain is wrapped around the axle on public and private keys. When you create a cloud server (instance) on Amazon's EC2 service and then want to connect to it via SSH, Amazon requires you to ...
0
votes
2answers
128 views

Connecting to a remote server using SSH from a Mac

I have generated a public key file (id_rsa.pub) and a private key file (id_rsa) and placed them in my ~/.ssh folder According to the server admin, he has already added "my key" to the server for ...
1
vote
1answer
556 views

Vim SCP parameter with private public key pair

Currently, I am trying to edit a file on a remote server using Vim's built-in netrw plugin. I can SSH fine into my Amazon EC2 server using a command like this: ssh -i <keyfile> ...
0
votes
2answers
899 views

Is a SSL key file binary?

I'm trying to install a SSL with my nginx setup. I configured nginx with those two files, but it doesn't work. Nginx complained the following error message. SSL: error:0906D06C:PEM ...
2
votes
1answer
1k views

Exim DKIM Error: DKIM: signing failed (RC -101) no matter what private key I try

I have this problem with Exim. DKIM fails on signing outgoing mails. This is the /var/log/exim4/mainlog output (Debian Squeeze): 2012-08-02 17:11:33 1Sx1k5-0004Tk-9D <= me@my_domain.com U=me ...
0
votes
1answer
121 views

Disabled password authentication with SSH, key had invalid permissions

Is there any way I can get access to my server back without using SSH to log in? my private keys had the incorrect permissions and now I can't log in.
5
votes
1answer
4k views

Does openssl always encrypt the private key?

When using openssl 0.9.8 to create a new self-signed cert+key, there is a -nodes parameter that can be used to tell openssl to not encrypt the private key it creates. For example: openssl req -x509 ...
2
votes
1answer
288 views

Changing RSA passphrase on Windows with TortoiseGit auxiliary programs?

We have designers who are on PCs and are starting to use our git version control repositories. we are using rsa keys to allow them to connect, and TortoiseGit as the interface. Everything is working ...
0
votes
3answers
245 views

How to use the correct SSH private key?

I have a private key inside /home/myuser/.ssh/privateKey I have a problem connecting to the ssh server, because i always get: Permission denied (publickey). I tried to debug the problem and i find ...
1
vote
1answer
319 views

Changing an IPSec pre-shared key without bringing down the tunnel (too long)

How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
4
votes
1answer
467 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
9
votes
2answers
3k views

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A ...
23
votes
5answers
3k views

How to secure your CA's private key?

I'm about to implement my own Certification Authority (CA) for interal use only. Now there is a problem, that the CA private should never ever be exploited. So right now the private key is encrypted. ...
5
votes
2answers
2k views

Easy multi-level authentication for sudo

I have a FreeBSD server with password-based SSH enabled. I would like to enable sudo, but I do not want a potential attacker to be one password away from root access. My current solution is logging ...
5
votes
3answers
298 views

how to prevent a user using private key after leaving organization?

In the enterprise environment, each user was issue a key pair for using to encrypting/signing. Since they have the private key, that mean they can decrypt any file that encrypt for them, even after ...
1
vote
2answers
873 views

ssh with key login failed from Mac OSX to CentOS 5 remote server

I'm trying to setup passwordless login for from my mac to my remote server running CentOS with public key authentication for "user1". I used $ ssh-keygen -t rsa to setup a public key on my mac and ...
2
votes
1answer
496 views

Hardware Security Module (HSM)

Looking to purchase an HSM to manage private keys, and price/scalability-price is one of my main concerns. It does need to be FIPS 140-2, level 3 certified (or compliant at least) and it must be ...
2
votes
2answers
125 views

SSH backup server - connect to multiple passwordless remotes

I'm wondering what are the steps to configure password-less ssh keys so I can connect and pull data from multiple remote servers. Can I just do: Backup Machine: ssh-keygen -t rsa ssh-copy-id -i ...
2
votes
1answer
3k views

How can I use an SSL certificate generated with Java keytool with Nginx?

I used the Java keytool to generate a "keystore": keytool -genkey -alias example.com -keyalg RSA -keystore example.com.keystore Then I generated a CSR (Certificate Signing Request): keytool ...
3
votes
2answers
11k views

Entering Private Key Passphrase with Putty Command Line PSFTP.exe

I'm using psftp.exe to automate a file download but need to connect with a private key as explained below. I am able to connect, however, the private key requires a Passphrase. This procedure works ...
0
votes
1answer
347 views

EC2 instances keep becoming inaccessible via SSH, what could issue be? Can I use elastic loadbalancer to check SSH connectivity?

This is mainly an issue for my development ec2 server as it seems that my instance keeps becoming inaccessible via SSH. It happened yesterday so I killed that one and started a new one and happened ...
1
vote
1answer
3k views

Error while decrypting https traffic in Wireshark

I configured Jetty with a self-generated private key and cert after a long struggle. Now, I'm having trouble decrypting the HTTPS traffic from the Jetty server that I captured for inspection. The ...
4
votes
1answer
700 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
1
vote
3answers
302 views

Simple SSH public/private key question

I am trying to learn this instead of just following guides so I can recommend proper actions when people do ask (and they do). Here is what I got down. First, generate both key with command such as ...
0
votes
1answer
295 views

Is it safe to share easy-rsa keys between machines? How?

I have two vpn hosts, vpn1 being the primary, vpn2 being a hot failover machine for cases where vpn1 goes down, either planned or unplanned. Right now, we manage client keys using the easy-rsa shell ...
1
vote
1answer
1k views

What's the connection between an AWS EC2 AMI's private key and the ~/.ssh/authorized_keys?

I have an EC2 instance running with a keypair that I don't have access to the private key of. I am currently accessing the instance freely thanks to having the public key of my own custom keypair ...
1
vote
1answer
1k views

need to manage private keys in windows 2003 server

I have installed a X.509 certificate into IIS 6.0 on Windows Server 2003. I would like to give the IIS user accesss to the certificate's private key. I can do this on Windows 7 IIS manager very ...
3
votes
1answer
3k views

Private key authentication with pam_ldap

I'd like to set up pam_ldap on some of our servers so that we can centrally manage who has access to which server, and easily revoke access if e.g. someone leaves the company. I've done some research ...
3
votes
1answer
213 views

Authentication using SSL certificates — General Question

SSL client authentication using certificates -- it's a complex topic, and I think I've learned just enough to make it even more complex. Here is my basic understanding: A public and private key are ...
2
votes
2answers
2k views

Importing SSL certificates on Win2k3 / IIS 6.0

As part of a large site migration, I need to copy over numerous (about 50) SSL certificates for different sites. I have tried to export them on the current server and then import them on the new ...
11
votes
5answers
5k views

Bypass ssh key file permission check

I have an encrypted FAT volume (for compatibility) containing a private key file and other sensitive data. I want to connect to my server through SSH using my private key, but of course, as FAT ...
1
vote
2answers
116 views

Being Prompted for Password

// Begin edit I should note now that I've tinkered around a bit more, that everything works as intended if I use the "-i identity_file" switch when connecting from "Automation" and point that at the ...