The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
27 views

How to avoid asking password when logging via SSH Key?

I have this scenario: I login to dns1 with key and same with dns2. Suddenly for each of the keys I used it started to ask me server password, this was never happening in past, and I did no changes on ...
0
votes
2answers
13 views

Can I use Public-Key-Pins with LetsEncrypt?

Can I setup Public-Key-Pins when I setup a cronjob to renew the LetsEncrypt certificate every 30 days? If the certificate is renewed then the Public-Key-Pin is also renewed right?
-3
votes
1answer
30 views

How to export private key? (GnuPG) [closed]

I have successfully created GnuPG public/private key pair using RSA and RSA algorithm. But I can't figure out a way to export public key and private key in the form of file with .asc extension. I am ...
0
votes
1answer
94 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
-1
votes
1answer
33 views

AWS EC2 Instance rejected public key

I just launched a AWS EC2 Image today, I got to authenticate successfully and I did the following changes: sudo yum update Install Oracle JDK 8_92 using wget Remove all other java options export ...
0
votes
1answer
71 views

Access with ssh only password without publickey with virtualbox

I tried to setup the ssh-server without publickey , with openssh-server 6.7p1-5 changed sshd_config RSAAuthentication no PubkeyAuthentication no PasswordAuthentication yes Restart ssh service ...
-2
votes
3answers
56 views

Permission denied (publickey) for my AWS EC2 instance from another computer

I have a public key file say dummy.pem and i copied this to another computer from where i need to access my EC2 instance. But it says @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ ...
0
votes
0answers
15 views

SSH not logging failed key authenticated logins from valid users [duplicate]

For some reason OpenSSH is not logging the failed logins in /var/log/btmp (lastb) of valid users when I am authenticating with an SSH Key. On the other hand It logs failed and successfull logins from ...
-1
votes
1answer
16 views

Restrict su - user for a user having public-private key pair

We have a user named user_root in our Linux environment. For which we have created the key-pair in AWS. This is our root user and our administrators log in with this username and the ppk file. We don'...
1
vote
1answer
57 views

Why won't my SSH keys forward properly?

I'm trying to ssh from my machine to another machine and from there to a third machine. When I do it manually, it works like this: localhost$ scp ~/.ssh/id_rsa myuser@myhost.something.something.com:. ...
0
votes
1answer
37 views

Centos requires me to change my password while I'm using private keys

I tried to login to my remote CentOS server using my private key and I was surprised to get this message : There were 29031 failed login attempts since the last successful login. After that it ...
0
votes
0answers
90 views

Why is my private key accepted on SSH only after I login on the target machine?

I have an interesting situation which I'm not even sure where to begin to investigate from. I have a Ubuntu 12.04 server with SSH locked down to PK-auth. When I reboot my server, and try to SSH into ...
0
votes
1answer
34 views

How to use PuttyGen.exe when moving key(s) from old machine to a new machine?

I've only generated the public/private key pair in PuttyGen.exe once. This was the first time I've ever used this tool. Rather than having the folks hosting the server that I'm connecting to, who ...
1
vote
1answer
53 views

Google Cloud auth access key secret key?

Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
-2
votes
3answers
44 views

How to connect to a SFTP [closed]

Got a SFTP Hostname username password from someone and he gave me a Server RSA public key fingerprint like this: d2:h4:h5:gf:f4 etcetera. But how do i need to connect to this host, doesnt this ...
1
vote
1answer
229 views

How can I get sshd to tell me why it's failing public key authentications? [closed]

I'm using OpenSSH 6.9p1 (on Lubuntu) as my SSH server. When trying to connect to it (using an SSH client in Cygwin), I keep being reverted to password authentication, despite having properly generated ...
0
votes
3answers
331 views

Now to add ssh publickey to Clustered NetApp for Active Directory user?

I am trying to load my ssh public key on a netapp instace but it seems that it does not allow me to add my key. lcy2-dosvm01::security login publickey> load-from-uri -uri http://pastebin.com/raw....
-2
votes
1answer
176 views

EC2 key pair authentication

I've created a custom ec2 ami image and trying to authenticate aws instance by using ec2 key pair authentication for a user USERVM by following below steps. ami creation . ec2-run-instances ... ...
0
votes
0answers
305 views

How to install a strong ephemeral Diffie-Hellman public key on windows server 2008 r2?

I have a server running windows server 2008 R2, which sits on my LAN. I'm a programmer rather than a server administrator, so I don't know how make the security on the server stronger. When I ...
-2
votes
1answer
103 views

Unable to disable SSH public key authentication and enable password authentication

I have a google compute engine instance, and I want to disable public key authentication (yes I know that it's a bad idea, before people jump in on me, just bear with me here) and in its place enable ...
2
votes
1answer
307 views

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem ...
1
vote
0answers
54 views

Public Key Pinning and subdomains [closed]

Shortly I have intend to install new webserver and I'd like to secure users a little bit more. I already have domain, (virtual) server and everything else that matters when configuring a server. ...
1
vote
2answers
51 views

openssl smime message signing: why do I need a -certfile key?

Here is how one should sign a message with openssl smime? according to the docs openssl smime -sign -in in.txt -text -out mail.msg -signer mycert.pem \ -inkey mykey.pem -certfile mycerts.pem But ...
-1
votes
1answer
25 views

Location for private key file for SFTP user

I would like to create a user account that can access web server files. I could set the home directory of this user to /var/www now, but the standard location for the authorized_keys file is in the ...
1
vote
4answers
9k views

How to get a .pem file from ssh key pair?

I created a key pair using ssh-keygen and get the two clasic id_rsa and id_rsa.pub. I imported the public key into my AWS EC2 account. Now I created a windows instance and to decrypt that instance ...
3
votes
1answer
135 views

How many SSH private key to setup for multiple servers?

The general process is to generate a pair of public and private keys and upload the public key to the server for SSH connection. Then, if I have to manage a large amount of servers, am I supposed to: ...
0
votes
2answers
101 views

OpenSSH: allow users with writeable HOME to use publick key authentication

On a local workstation I need to have a handful of users to be able to freely write in each other $HOME. I KNOW this is a security breach and, in the specific situation, I do not care at all. I have ...
1
vote
2answers
318 views

Secure EC2 instance from logging without .pem file

I see here and here (under Connecting to Your Linux Instance if You Lose Your Private Key) ways to access EC2 instance without a .pem file that was created when the instance was created. I would like ...
0
votes
1answer
39 views

Add SSH user with sudo privilege, using pubkey

I need to add an account for someone to be able to SSH into my server and have sudo privileges. He has given me his pubkey which is something like: ssh-rsa AAAAfbfi40fdsfodudksjflksjdf..... name@...
0
votes
1answer
23 views

SSH: Login to local pc by key

I got a little problem. I'm using apt-dater to keep different linux-systems updated. Apt-dater uses ssh to login to these systems - there's no problem by doing this. To connect to localhost, the ...
5
votes
2answers
766 views

Is it possible to use a gpg public key to encrypt a message without importing the key?

Sometimes I might want to use someone's gpg key to send a message but will have no need to ever use the key again. Importing the key in this instance seems unnecessary. I've searched, but can't find ...
0
votes
1answer
2k views

How to convert DER formatted public key file to PEM form

I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key. The command I have used - openssl ...
0
votes
0answers
152 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
1
vote
2answers
89 views

sshd: logging client's public key

I need to run an SSH server and log the IP & public key of any client that attempts to connect (without actually granting access). The use case is this: I deploy this web app to a remote host ...
2
votes
1answer
401 views

ssh command line specify server host key fingerprint

Using ssh command line (OpenSSH), can I specify the server's host key fingerprint? This is possible with winscp.com using (e.g.) -hostkey="ssh-rsa 2048 AA:BB:CC...etc I have read the man page a ...
1
vote
2answers
4k views

Adding new user to AWS EC2 - Permission denied (publickey)

I am trying to set up a new user for my AWS EC2. I have followed step by step this tutorial but I get Permission denied (publickey) error. I tried as well creating a newuser-key-pair.pem from AWS EC2 ...
-1
votes
1answer
1k views

PEM File “CERTIFICATE” vs “PUBLIC KEY”

I have a PEM file that looks like: -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- which I can convert to another PEM file using: openssl x509 -in key.crt -pubkey -noout. The new PEM file ...
0
votes
0answers
273 views

Installing PostgreSQL on Centos 5

I'm following the instructions from here. I try and run yum localinstall http://yum.postgresql.org/9.4/redhat/rhel-5-i386/pgdg-centos94-9.4-1.noarch.rpm which returns the fault cannot open file... ...
0
votes
1answer
470 views

SSH key stopped working on Ubuntu Azure VPS

I have an Ubuntu instance that I'm running on Azure. I've been using it for the last 6 months or so to level up my novice Linux admin skills. Yesterday I was configuring a Capistrano deployment to ...
0
votes
1answer
58 views

After Updating to SHA2, private and public doesn't match

I've upgraded to SHA2 certificate, but after upgrading the new certificate key doesn't match my old private key. Public key has changed after updating and it doesn't match to previous private key. ...
2
votes
1answer
173 views

Restrict SSH login to public key from public networks, but allow password from internal networks

Assume UserA is allowed to log in by SSH to a server from public networks as well as from within private ones. Is there any option to restrict password-enabled logins to the private networks while ...
5
votes
1answer
1k views

What is the purpose of a custom Certificate Trust List?

You can create and deploy a certificate trust list as detailed here, but I'm trying to understand the advantages of this over just deploying root and intermediate certs with group policy the normal ...
5
votes
6answers
6k views

SSH public key login fails without pattern

(previously posted at stackoverflow by error) I'm running a bunch of servers with Ubuntu 14.04.1 (sun,hyperion,...) all of which use public keys (OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 on all ...
14
votes
2answers
2k views

Linux ssh: allow public-key authentication without giving user read rights to private key

Users logged in on my Linux server should be able to ssh to a specific remote machine with a default account. The authentication on the remote machine uses public key, so on the server the ...
-6
votes
1answer
473 views

Is the ssh key name a part of the authentication? [closed]

The ssh public keys in authorized_hosts have three parts - a type, the key and a name. For example, an rsa key might look like: ssh-rsa gn29JyDdiyLFlggptrCxgzS6diAF6o94Dtg<abbreviated>oF9grbm7g+...
-1
votes
1answer
896 views

How to pass the SSH_AUTH_SOCK through sudo (Permission denied (publickey).) [duplicate]

I have a Ubuntu server with the users: ubuntu and user I connect to each of the users using ssh -A (to pass my local machine keys to SSH). From any of the users I can connect to the SSH server of ...
-2
votes
2answers
42 views

SSH using ssh_key from a different account

Is there a way for a user to ssh as a different user using ssh_keys? For example, i have host A B and C. User X SSHes from A to B as himself ( A -- as X --> B ) Now the user wants to SSH to C from ...
2
votes
3answers
136 views

How to configure SSH access for key authentication for another client?

I know that if I want to configure SSH access for key authentication, I need to use the following command: ssh-keygen -b 2048 -t rsa -C “mypassphrase” I then need to copy the codes created in ...
-3
votes
3answers
1k views

Public Key authentication fails while using the -i parameter on ssh command

I have to do public key based authentication on two Linux servers. Machine 2 (192.168.3.132) username: vfx_30 home dir: /home/vfx_30 ssh keys: /home/vfx_30/.ssh/id_rsa /home/vfx_30/.ssh/id_rsa.pub ...
-2
votes
2answers
256 views

Add ssh public key to group instead of users on centos 6.5

I am a newbie to linux administration. I have a box with centos 6.5 x64. Ive been configuring ssh access via public/private key. Ive been wondering if I could add the public key to a user group ...