The tag has no wiki summary.

learn more… | top users | synonyms

89
votes
1answer
23k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
22
votes
5answers
2k views

How to secure your CA's private key?

I'm about to implement my own Certification Authority (CA) for interal use only. Now there is a problem, that the CA private should never ever be exploited. So right now the private key is encrypted. ...
17
votes
4answers
2k views

Why does Amazon release private keys instead of public keys?

My brain is wrapped around the axle on public and private keys. When you create a cloud server (instance) on Amazon's EC2 service and then want to connect to it via SSH, Amazon requires you to ...
10
votes
1answer
375 views

Does generating a CSR through IIS 7.5 on Windows Server 2008 R2 always create a new private key?

Generating a CSR for a Windows 2008 R2 server and need to ensure that the private key used for the CSR is new. I have used OpenSSL before to create my own self-signed certs for testing and if I ...
9
votes
5answers
3k views

Bypass ssh key file permission check

I have an encrypted FAT volume (for compatibility) containing a private key file and other sensitive data. I want to connect to my server through SSH using my private key, but of course, as FAT ...
8
votes
4answers
11k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
6
votes
2answers
691 views

How to find out if an OpenSSL certificate was created by a certain private key?

I have an OpenSSl certificate. I also need the private key. I was told it is located somewhere on the server, and true enough, I found multiple SSL key files. Before I try them all by brute force: Is ...
5
votes
5answers
2k views

Stop ssh client from offering all the public keys it can find?

Like most sysadmins I use openssh all the time. I have about a dozen ssh keys, I like to have a different ssh key for each host. However this causes a problem when I am connecting to a host for the ...
5
votes
2answers
2k views

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A ...
5
votes
2answers
2k views

Easy multi-level authentication for sudo

I have a FreeBSD server with password-based SSH enabled. I would like to enable sudo, but I do not want a potential attacker to be one password away from root access. My current solution is logging ...
5
votes
3answers
294 views

how to prevent a user using private key after leaving organization?

In the enterprise environment, each user was issue a key pair for using to encrypting/signing. Since they have the private key, that mean they can decrypt any file that encrypt for them, even after ...
5
votes
2answers
351 views

Passing a private key to scp from the command line instead of a file [closed]

Is there a way to pass the contents of a private key directly to the scp command instead of having to copy it to a file and pointing at it via the -i /path/to/key.pem option? So instead of doing: ...
5
votes
2answers
3k views

How do I setup ssh with both private key and password?

How do I setup ssh with both private key and password? In /etc/ssh/sshd_config, I currently have: RSAAuthentication yes PubkeyAuthentication yes PasswordAuthentication yes But apparently this ...
4
votes
3answers
6k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
4
votes
3answers
2k views

SSH does not allow the use of a key with group readable permissions

I have a development git server that deploys to a live server when the live branch is pushed to. Every user has their own login and therefore the post-receive hook which does the live deployment is ...
4
votes
1answer
3k views

Does openssl always encrypt the private key?

When using openssl 0.9.8 to create a new self-signed cert+key, there is a -nodes parameter that can be used to tell openssl to not encrypt the private key it creates. For example: openssl req -x509 ...
4
votes
1answer
625 views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
4
votes
1answer
595 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
4
votes
1answer
295 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
3
votes
5answers
5k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
3
votes
4answers
10k views

certutil: function failed: security library: bad database.

when I'm using certutil it returns this error: certutil: function failed: security library: bad database. e.g. I can't list certs or keys How Can I fix this? Thanks
3
votes
1answer
2k views

What are the risks in backing up private keys on services like Dropbox?

I have a couple of private keys that I use to administer Amazon EC2 instances. I recently lost these keys when I did a re-install of my computer and I found out that the CD-RW I'd backed them up to ...
3
votes
2answers
4k views

Entering Private Key Passphrase with Putty Command Line PSFTP.exe

I'm using psftp.exe to automate a file download but need to connect with a private key as explained below. I am able to connect, however, the private key requires a Passphrase. This procedure works ...
3
votes
2answers
599 views

Ssh-add and contacting server unsuccessfully

I forgot how to do this procedure. I did on OSX 10.9.1 run ssh-keygen in my server moved the private-key id_rsa to my laptop's $HOME/.ssh/id_rsa, removed the private key id_rsa from my server ...
3
votes
1answer
873 views

Private key authentication with pam_ldap

I'd like to set up pam_ldap on some of our servers so that we can centrally manage who has access to which server, and easily revoke access if e.g. someone leaves the company. I've done some research ...
3
votes
1answer
197 views

Authentication using SSL certificates — General Question

SSL client authentication using certificates -- it's a complex topic, and I think I've learned just enough to make it even more complex. Here is my basic understanding: A public and private key are ...
2
votes
2answers
231 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
2
votes
2answers
2k views

Where Is an SSL Private Key Stored?

My particular situation applies to Windows but I welcome knowing how this would differ from other practical applications. The subsets contain information that I'm basing my logic on, please correct ...
2
votes
3answers
233 views

Disabled root login for SSH in Centos 5.9, key login no longer working

I have a Centos 5.9 server which I have previously configured to access via SSH key login and this has been working fine for many months. I recently had to have an issue resolved remotely which ...
2
votes
3answers
3k views

Why can't I ssh into my server using my private key?

I just setup my new server as I used to, and this time I can't login using my private key. The server is ubuntu 11.04. And I have setup following ssh key directories. root@myserv: ls -la drwx------ ...
2
votes
1answer
606 views

Extract private key from Domino keyring

I'm trying to use a multipurpose certificate on an infrastucture that contains a Domino 7 server. To accomplish this, I tried: Generate a CSR outside of Domino: I'm able to use the produced ...
2
votes
1answer
2k views

How can I use an SSL certificate generated with Java keytool with Nginx?

I used the Java keytool to generate a "keystore": keytool -genkey -alias example.com -keyalg RSA -keystore example.com.keystore Then I generated a CSR (Certificate Signing Request): keytool ...
2
votes
1answer
217 views

Changing RSA passphrase on Windows with TortoiseGit auxiliary programs?

We have designers who are on PCs and are starting to use our git version control repositories. we are using rsa keys to allow them to connect, and TortoiseGit as the interface. Everything is working ...
2
votes
2answers
120 views

SSH backup server - connect to multiple passwordless remotes

I'm wondering what are the steps to configure password-less ssh keys so I can connect and pull data from multiple remote servers. Can I just do: Backup Machine: ssh-keygen -t rsa ssh-copy-id -i ...
2
votes
2answers
2k views

Importing SSL certificates on Win2k3 / IIS 6.0

As part of a large site migration, I need to copy over numerous (about 50) SSL certificates for different sites. I have tried to export them on the current server and then import them on the new ...
2
votes
1answer
429 views

Hardware Security Module (HSM)

Looking to purchase an HSM to manage private keys, and price/scalability-price is one of my main concerns. It does need to be FIPS 140-2, level 3 certified (or compliant at least) and it must be ...
1
vote
3answers
250 views

Simple SSH public/private key question

I am trying to learn this instead of just following guides so I can recommend proper actions when people do ask (and they do). Here is what I got down. First, generate both key with command such as ...
1
vote
1answer
132 views

Log onto Windows AD Domain via SSH using private key

I would like to log into a windows domain from a linux box using a private key in place of username/password. I am using FreeSSH on the windows box and have no problems using keys for local accounts. ...
1
vote
3answers
2k views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
1
vote
2answers
4k views

strongSwan - how do i generate pre shared keys?

I'm using the strongswan documentation right here I've added to /etc/ipsec.secrets the following line: : RSA moonKey.pem "SomePwd" however i don't know how to create moonKey.pem. Any ideas? this ...
1
vote
1answer
2k views

Error while decrypting https traffic in Wireshark

I configured Jetty with a self-generated private key and cert after a long struggle. Now, I'm having trouble decrypting the HTTPS traffic from the Jetty server that I captured for inspection. The ...
1
vote
2answers
1k views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
1
vote
1answer
215 views

Changing an IPSec pre-shared key without bringing down the tunnel (too long)

How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
1
vote
2answers
114 views

Being Prompted for Password

// Begin edit I should note now that I've tinkered around a bit more, that everything works as intended if I use the "-i identity_file" switch when connecting from "Automation" and point that at the ...
1
vote
1answer
44 views

Connect to server with ppk from console

i am trying to connect ubuntu server using sftp server. But the problem is i have a ppk key and i mustn't convert it to openssh. Is there a way to connect to server using ppk from command line? This ...
1
vote
1answer
307 views

Vim SCP parameter with private public key pair

Currently, I am trying to edit a file on a remote server using Vim's built-in netrw plugin. I can SSH fine into my Amazon EC2 server using a command like this: ssh -i <keyfile> ...
1
vote
1answer
976 views

Exim DKIM Error: DKIM: signing failed (RC -101) no matter what private key I try

I have this problem with Exim. DKIM fails on signing outgoing mails. This is the /var/log/exim4/mainlog output (Debian Squeeze): 2012-08-02 17:11:33 1Sx1k5-0004Tk-9D <= me@my_domain.com U=me ...
1
vote
2answers
2k views

How to delete the private key associated with a certificate windows 7

I am trying to reimport a certificate, except this time i want to import it with an exportable private key. I have the sneaking suspicion that since windows 7 does not actually delete the private key ...
1
vote
1answer
1k views

need to manage private keys in windows 2003 server

I have installed a X.509 certificate into IIS 6.0 on Windows Server 2003. I would like to give the IIS user accesss to the certificate's private key. I can do this on Windows 7 IIS manager very ...
1
vote
1answer
1k views

What's the connection between an AWS EC2 AMI's private key and the ~/.ssh/authorized_keys?

I have an EC2 instance running with a keypair that I don't have access to the private key of. I am currently accessing the instance freely thanks to having the public key of my own custom keypair ...