The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
292 views

EC2 instances keep becoming inaccessible via SSH, what could issue be? Can I use elastic loadbalancer to check SSH connectivity?

This is mainly an issue for my development ec2 server as it seems that my instance keeps becoming inaccessible via SSH. It happened yesterday so I killed that one and started a new one and happened ...
1
vote
1answer
2k views

Error while decrypting https traffic in Wireshark

I configured Jetty with a self-generated private key and cert after a long struggle. Now, I'm having trouble decrypting the HTTPS traffic from the Jetty server that I captured for inspection. The ...
4
votes
1answer
594 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
1
vote
3answers
250 views

Simple SSH public/private key question

I am trying to learn this instead of just following guides so I can recommend proper actions when people do ask (and they do). Here is what I got down. First, generate both key with command such as ...
2
votes
1answer
429 views

Hardware Security Module (HSM)

Looking to purchase an HSM to manage private keys, and price/scalability-price is one of my main concerns. It does need to be FIPS 140-2, level 3 certified (or compliant at least) and it must be ...
0
votes
1answer
223 views

Is it safe to share easy-rsa keys between machines? How?

I have two vpn hosts, vpn1 being the primary, vpn2 being a hot failover machine for cases where vpn1 goes down, either planned or unplanned. Right now, we manage client keys using the easy-rsa shell ...
3
votes
5answers
5k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
4
votes
3answers
6k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
1
vote
1answer
1k views

need to manage private keys in windows 2003 server

I have installed a X.509 certificate into IIS 6.0 on Windows Server 2003. I would like to give the IIS user accesss to the certificate's private key. I can do this on Windows 7 IIS manager very ...
1
vote
1answer
1k views

What's the connection between an AWS EC2 AMI's private key and the ~/.ssh/authorized_keys?

I have an EC2 instance running with a keypair that I don't have access to the private key of. I am currently accessing the instance freely thanks to having the public key of my own custom keypair ...
5
votes
5answers
2k views

Stop ssh client from offering all the public keys it can find?

Like most sysadmins I use openssh all the time. I have about a dozen ssh keys, I like to have a different ssh key for each host. However this causes a problem when I am connecting to a host for the ...
3
votes
1answer
870 views

Private key authentication with pam_ldap

I'd like to set up pam_ldap on some of our servers so that we can centrally manage who has access to which server, and easily revoke access if e.g. someone leaves the company. I've done some research ...
3
votes
1answer
197 views

Authentication using SSL certificates — General Question

SSL client authentication using certificates -- it's a complex topic, and I think I've learned just enough to make it even more complex. Here is my basic understanding: A public and private key are ...
5
votes
2answers
3k views

How do I setup ssh with both private key and password?

How do I setup ssh with both private key and password? In /etc/ssh/sshd_config, I currently have: RSAAuthentication yes PubkeyAuthentication yes PasswordAuthentication yes But apparently this ...
9
votes
5answers
3k views

Bypass ssh key file permission check

I have an encrypted FAT volume (for compatibility) containing a private key file and other sensitive data. I want to connect to my server through SSH using my private key, but of course, as FAT ...
1
vote
2answers
114 views

Being Prompted for Password

// Begin edit I should note now that I've tinkered around a bit more, that everything works as intended if I use the "-i identity_file" switch when connecting from "Automation" and point that at the ...
2
votes
2answers
2k views

Importing SSL certificates on Win2k3 / IIS 6.0

As part of a large site migration, I need to copy over numerous (about 50) SSL certificates for different sites. I have tried to export them on the current server and then import them on the new ...
5
votes
2answers
2k views

Easy multi-level authentication for sudo

I have a FreeBSD server with password-based SSH enabled. I would like to enable sudo, but I do not want a potential attacker to be one password away from root access. My current solution is logging ...
89
votes
1answer
23k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?