The tag has no usage guidance.

learn more… | top users | synonyms

298
votes
23answers
416k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
0
votes
1answer
19 views

Node.js app on ElasticBeanstalk cannot access private key file on server

I have a node.js application running on ElasticBeanstalk. Part of it's configuration is a path to a .p12 key file. When the application attempts to use the key file, a permission denied exception is ...
0
votes
0answers
14 views

OpenVpn Client credentials security, key crt generation

I'm curious what is Your opinion on openvpn client crt/key security In most cases (tutorials), the clients key/crt are generated on the same openvpn server, and no one cares about the future. This is ...
5
votes
3answers
4k views

How do I setup ssh with both private key and password?

How do I setup ssh with both private key and password? In /etc/ssh/sshd_config, I currently have: RSAAuthentication yes PubkeyAuthentication yes PasswordAuthentication yes But apparently this ...
2
votes
3answers
56 views

Apache SSL without Private Key

We are currently working with a client who needs SAML authentication to setup their QA site on our servers. They have sent us the CRT file for the SSL to install, however they are not sending the key. ...
-1
votes
1answer
16 views

Restrict su - user for a user having public-private key pair

We have a user named user_root in our Linux environment. For which we have created the key-pair in AWS. This is our root user and our administrators log in with this username and the ppk file. We ...
3
votes
2answers
903 views

Extract private key from Domino keyring

I'm trying to use a multipurpose certificate on an infrastucture that contains a Domino 7 server. To accomplish this, I tried: Generate a CSR outside of Domino: I'm able to use the produced ...
4
votes
2answers
3k views

What are the risks in backing up private keys on services like Dropbox?

I have a couple of private keys that I use to administer Amazon EC2 instances. I recently lost these keys when I did a re-install of my computer and I found out that the CD-RW I'd backed them up to ...
-2
votes
1answer
46 views

ssh - Why isn't it trying my private key? [closed]

I'm trying to connect to a remote SSH server using a private key at ~/.ssh/id_rsa. When I ssh -v to the server I get the following: ... debug1: Authentications that can continue: publickey debug1: ...
2
votes
1answer
45 views

Keeping track of SSH private keys without comments

SSH public keys support comments (which simply consist of text appended to the end of the key), which makes it easy to identify an otherwise unidentifiable id_rsa.pub file. You can use the comment to ...
9
votes
8answers
642 views

Ssh key accepted by host but client disconnect

Helo, I have a problem with SSH after fedora 23 installation. When i wan't to connect to my remote host with private key my host find the key : debug1: matching key found: file ...
4
votes
2answers
549 views

How to SSH to a remote server using a private key on Linux?

I have been trying to connect to a remote server using my private key file from the terminal, but it doesn't seem to work. I don't understand why. Here is how I do it: $ ssh -i private.ppk ...
0
votes
1answer
35 views

Centos requires me to change my password while I'm using private keys

I tried to login to my remote CentOS server using my private key and I was surprised to get this message : There were 29031 failed login attempts since the last successful login. After that it ...
6
votes
1answer
99 views

Can I get anSHA-256 certificate when the CSR is for SHA-1?

I've read: By default, OpenSSL cryptographic tools are configured to make SHA1 signatures. for example, if you want to generate a SHA256-signed certificate request (CSR) , add in the command ...
0
votes
1answer
26 views

How to use PuttyGen.exe when moving key(s) from old machine to a new machine?

I've only generated the public/private key pair in PuttyGen.exe once. This was the first time I've ever used this tool. Rather than having the folks hosting the server that I'm connecting to, who ...
0
votes
2answers
54 views

Security measures of Linux 'certificate store'

I know that windows is using a kind of master key for encrypting private keys which are stored in the certificate store of the OS. Moreover I found out that the certificates and keys in linux are not ...
4
votes
5answers
19k views

certutil: function failed: security library: bad database

when I'm using certutil it returns this error: certutil: function failed: security library: bad database. e.g. I can't list certs or keys How Can I fix this?
1
vote
1answer
49 views

Google Cloud auth access key secret key?

Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
1
vote
1answer
55 views

md5 sum of private key is different from that of certificate and CSR

the output of: openssl req -noout -modulus -in presentCSR.csr and openssl x509 -noout -modulus -in server_new.crt | openssl md5 matches. But the output of openssl rsa -noout -modulus -in ...
136
votes
2answers
44k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
0
votes
2answers
65 views

Give private key ownership to user without /home

so I am looking to set up ssh private/public keys between two servers, for use with sftp (and ultimately lftp using sftp - but one step at a time). I have created the private and public keys, and ...
0
votes
1answer
530 views

How to create a SSL certificate using SSL certificate text?

I have received a certificate from StartSSL for my domain in pure text which looks somewhat like: -----BEGIN CERTIFICATE----- [...]Many letters and digits[...] -----END CERTIFICATE----- I'm trying ...
0
votes
1answer
337 views

Can I use kadmin (Linux) to add/remote SPNs from an Active Directory server?

Is it possible to use kadmin (Linux) to add/remote SPNs from an Active Directory server? I'm trying to add some service principles on my Active Directory server and store the keys in the local keytab ...
2
votes
1answer
1k views

How to change the ssh auth method in vagrant, from password to private key?

I run vagrant(1.7.2) on Mac OS(10.10.3) with Snappy Ubuntu Core(15.04 stable), for docker, using VirtualBox 4.3.28 as a provider. I can manually ssh in the Ubuntu guest OS by a private key method in ...
0
votes
1answer
39 views

Confusion over the correct private key

I inherited work on a website and I am trying ultimately to replace SHA-1 certificates with SHA-2 certificates. The first step would be to generate a CSR from my server using the command openssl req ...
2
votes
1answer
218 views

AWS :: Ubuntu instance consistently denying my private keys

Sorry to ask this question again, as I know its been asked a crap load of times... I have been through a bunch of previous posts but have had no luck. Have tried everything... Steps: 1.) Launch ...
0
votes
4answers
7k views

How to get a .pem file from ssh key pair?

I created a key pair using ssh-keygen and get the two clasic id_rsa and id_rsa.pub. I imported the public key into my AWS EC2 account. Now I created a windows instance and to decrypt that instance ...
1
vote
1answer
27 views

Is it a good idea to upload my private key to VPS / servers?

Saying if I am deploying my application to the server using git, and the repository needs authentication to be pulled, it will be very convenient if I just upload my private key there. However is it ...
1
vote
2answers
251 views

Secure EC2 instance from logging without .pem file

I see here and here (under Connecting to Your Linux Instance if You Lose Your Private Key) ways to access EC2 instance without a .pem file that was created when the instance was created. I would like ...
1
vote
2answers
7k views

strongSwan - how do i generate pre shared keys?

I'm using the strongswan documentation right here I've added to /etc/ipsec.secrets the following line: : RSA moonKey.pem "SomePwd" however i don't know how to create moonKey.pem. Any ideas? this ...
9
votes
3answers
10k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
0
votes
1answer
87 views

How to retrieve an organization's private key?

I've just installed Chef Server version 12, and created an admin user and default organization myorg. I see the organization in the Chef Manage GUI, and its public key. Using a workstation that's ...
14
votes
4answers
6k views

How to manage a web servers SSL private key protection (password vs. no password)?

We have a discussion in my company's security group about what's the worse of the following options to manage SSL private key. The web server needs access to the private key for the encryption ...
-2
votes
1answer
51 views

Install SSH key in UNIX server

I'm trying to connect to a UNIX server from a Windows server, through PSFTP. I am using this command in CMD: psftp.exe -i %userprofile%\.ssh\certificate.ppk username@unixserver The problem is that ...
1
vote
0answers
315 views

Node + PM2 - How to securely read SSL private key with non-root user?

I'm looking for a way to run node via PM2 whilst reading an SSL private-key that is placed in a secure directory. Details: Bitnami LEMP stack with Node permissions for /etc/ssl/private: drwx------ ...
2
votes
2answers
178 views

When should I generate a new private key for SSL?

I'm renewing a wildcard SSL cert. The easiest option is to use my existing private key and generate a new CSR using that. Is there any reason (assuming my private key hasn't been compromised) to go ...
2
votes
3answers
4k views

Why can't I ssh into my server using my private key?

I just setup my new server as I used to, and this time I can't login using my private key. The server is ubuntu 11.04. And I have setup following ssh key directories. root@myserv: ls -la drwx------ ...
1
vote
1answer
170 views

Connect to server with ppk from console

i am trying to connect ubuntu server using sftp server. But the problem is i have a ppk key and i mustn't convert it to openssh. Is there a way to connect to server using ppk from command line? This ...
6
votes
1answer
3k views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
3
votes
1answer
1k views

SSH via terminal succeeds, but same SSH connection via Ansible fails on same machine?

Can anyone possibly shed any light on why this is happening? I am logged into machine A, the client, with user basicuser. When I try to run an ansible playbook on machine B (server machine, as ...
6
votes
2answers
962 views

How to find out if an OpenSSL certificate was created by a certain private key?

I have an OpenSSl certificate. I also need the private key. I was told it is located somewhere on the server, and true enough, I found multiple SSL key files. Before I try them all by brute force: Is ...
5
votes
2answers
3k views

Passing a private key to scp from the command line instead of a file [closed]

Is there a way to pass the contents of a private key directly to the scp command instead of having to copy it to a file and pointing at it via the -i /path/to/key.pem option? So instead of doing: ...
1
vote
1answer
269 views

Log onto Windows AD Domain via SSH using private key

I would like to log into a windows domain from a linux box using a private key in place of username/password. I am using FreeSSH on the windows box and have no problems using keys for local accounts. ...
10
votes
1answer
703 views

Does generating a CSR through IIS 7.5 on Windows Server 2008 R2 always create a new private key?

Generating a CSR for a Windows 2008 R2 server and need to ensure that the private key used for the CSR is new. I have used OpenSSL before to create my own self-signed certs for testing and if I ...
2
votes
2answers
338 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
0
votes
1answer
515 views

AWS: Difficulty changing server keys - permission denied (public key)

Struggling with a common problem. The awkward thing is I have followed the guide linked below with success before and I have fully established a working Amazon Web Services LAMP stack running Ubuntu ...
0
votes
1answer
229 views

Where to store private key on Linux build server

On my Debian 3.2.54-2 build server I'd like to sign the build artifacts (JAR files) with my private key to ensure their authenticity. I've created a private key secring.gpg using GnuPG and protected ...
2
votes
3answers
339 views

Disabled root login for SSH in Centos 5.9, key login no longer working

I have a Centos 5.9 server which I have previously configured to access via SSH key login and this has been working fine for many months. I recently had to have an issue resolved remotely which ...
1
vote
2answers
3k views

SSH private key to Ubuntu works from command line but not using Remmina

I have been trying to figure out why I can't get SSH working using Remmina SSH client. In an Ubuntu 12.10 environment, I can connect with my server from the command line using openssh server, like ...
3
votes
2answers
2k views

Ssh-add and contacting server unsuccessfully

I forgot how to do this procedure. I did on OSX 10.9.1 run ssh-keygen in my server moved the private-key id_rsa to my laptop's $HOME/.ssh/id_rsa, removed the private key id_rsa from my server ...