The tag has no usage guidance.

learn more… | top users | synonyms

10
votes
2answers
9k views

Authentication Order with SSH

When I login via ssh with -v I see that ssh is authenticating the following way debug1: Authentications that can continue: publickey,gssapi-with-mic,password,hostbased I would like to change the ...
0
votes
1answer
31 views

Centos requires me to change my password while I'm using private keys

I tried to login to my remote CentOS server using my private key and I was surprised to get this message : There were 29031 failed login attempts since the last successful login. After that it ...
2
votes
1answer
7k views

How to configure public-key authentication with vsftpd?

The documentation of vsftpd is quite good (https://security.appspot.com/vsftpd/vsftpd_conf.html), however I cannot find some details on how to use public key authentication. I know that I need ...
0
votes
0answers
56 views

Why is my private key accepted on SSH only after I login on the target machine?

I have an interesting situation which I'm not even sure where to begin to investigate from. I have a Ubuntu 12.04 server with SSH locked down to PK-auth. When I reboot my server, and try to SSH into ...
4
votes
6answers
5k views

SSH public key login fails without pattern

(previously posted at stackoverflow by error) I'm running a bunch of servers with Ubuntu 14.04.1 (sun,hyperion,...) all of which use public keys (OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 on all ...
0
votes
1answer
15 views

How to use PuttyGen.exe when moving key(s) from old machine to a new machine?

I've only generated the public/private key pair in PuttyGen.exe once. This was the first time I've ever used this tool. Rather than having the folks hosting the server that I'm connecting to, who ...
4
votes
5answers
17k views

certutil: function failed: security library: bad database

when I'm using certutil it returns this error: certutil: function failed: security library: bad database. e.g. I can't list certs or keys How Can I fix this?
0
votes
3answers
115 views

Now to add ssh publickey to Clustered NetApp for Active Directory user?

I am trying to load my ssh public key on a netapp instace but it seems that it does not allow me to add my key. lcy2-dosvm01::security login publickey> load-from-uri -uri ...
1
vote
2answers
3k views

Adding new user to AWS EC2 - Permission denied (publickey)

I am trying to set up a new user for my AWS EC2. I have followed step by step this tutorial but I get Permission denied (publickey) error. I tried as well creating a newuser-key-pair.pem from AWS EC2 ...
1
vote
1answer
39 views

Google Cloud auth access key secret key?

Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
15
votes
1answer
6k views

Add comment to existing SSH public key

I have an existing SSH key (public and private), that was created with ssh-keygen. How can I add a comment to this existing key?
128
votes
2answers
39k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
-2
votes
3answers
30 views

How to connect to a SFTP [closed]

Got a SFTP Hostname username password from someone and he gave me a Server RSA public key fingerprint like this: d2:h4:h5:gf:f4 etcetera. But how do i need to connect to this host, doesnt this ...
1
vote
1answer
75 views

How can I get sshd to tell me why it's failing public key authentications? [closed]

I'm using OpenSSH 6.9p1 (on Lubuntu) as my SSH server. When trying to connect to it (using an SSH client in Cygwin), I keep being reverted to password authentication, despite having properly generated ...
-2
votes
1answer
62 views

EC2 key pair authentication

I've created a custom ec2 ami image and trying to authenticate aws instance by using ec2 key pair authentication for a user USERVM by following below steps. ami creation . ec2-run-instances ... ...
0
votes
0answers
236 views

How to install a strong ephemeral Diffie-Hellman public key on windows server 2008 r2?

I have a server running windows server 2008 R2, which sits on my LAN. I'm a programmer rather than a server administrator, so I don't know how make the security on the server stronger. When I ...
-2
votes
1answer
73 views

Unable to disable SSH public key authentication and enable password authentication

I have a google compute engine instance, and I want to disable public key authentication (yes I know that it's a bad idea, before people jump in on me, just bear with me here) and in its place enable ...
0
votes
1answer
1k views

SSH key stopped working, still works on other servers

I've got about a dozen servers that I log into via an authorised ssh key, and up until today it was working fine. Today, one of those servers refuses to accept my key - it accepts a root key and my ...
1
vote
1answer
1k views

Non-interactive SSH connection fails - error: can't open /dev/tty: No such device or address; Host key verification failed

Below you can see the log. The connection is from a Cygwin SSH client to a Cygwin SSHD server. The connection works ok when launched from the command line but fails when launched from Jenkins (Java ...
1
vote
2answers
45 views

openssl smime message signing: why do I need a -certfile key?

Here is how one should sign a message with openssl smime? according to the docs openssl smime -sign -in in.txt -text -out mail.msg -signer mycert.pem \ -inkey mykey.pem -certfile mycerts.pem But ...
2
votes
1answer
142 views

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem ...
1
vote
0answers
42 views

Public Key Pinning and subdomains [closed]

Shortly I have intend to install new webserver and I'd like to secure users a little bit more. I already have domain, (virtual) server and everything else that matters when configuring a server. ...
-1
votes
1answer
20 views

Location for private key file for SFTP user

I would like to create a user account that can access web server files. I could set the home directory of this user to /var/www now, but the standard location for the authorized_keys file is in the ...
0
votes
4answers
3k views

How to get a .pem file from ssh key pair?

I created a key pair using ssh-keygen and get the two clasic id_rsa and id_rsa.pub. I imported the public key into my AWS EC2 account. Now I created a windows instance and to decrypt that instance ...
0
votes
2answers
70 views

OpenSSH: allow users with writeable HOME to use publick key authentication

On a local workstation I need to have a handful of users to be able to freely write in each other $HOME. I KNOW this is a security breach and, in the specific situation, I do not care at all. I have ...
3
votes
1answer
101 views

How many SSH private key to setup for multiple servers?

The general process is to generate a pair of public and private keys and upload the public key to the server for SSH connection. Then, if I have to manage a large amount of servers, am I supposed to: ...
1
vote
2answers
176 views

Secure EC2 instance from logging without .pem file

I see here and here (under Connecting to Your Linux Instance if You Lose Your Private Key) ways to access EC2 instance without a .pem file that was created when the instance was created. I would like ...
0
votes
1answer
36 views

Add SSH user with sudo privilege, using pubkey

I need to add an account for someone to be able to SSH into my server and have sudo privileges. He has given me his pubkey which is something like: ssh-rsa AAAAfbfi40fdsfodudksjflksjdf..... ...
0
votes
1answer
23 views

SSH: Login to local pc by key

I got a little problem. I'm using apt-dater to keep different linux-systems updated. Apt-dater uses ssh to login to these systems - there's no problem by doing this. To connect to localhost, the ...
3
votes
2answers
394 views

Is it possible to use a gpg public key to encrypt a message without importing the key?

Sometimes I might want to use someone's gpg key to send a message but will have no need to ever use the key again. Importing the key in this instance seems unnecessary. I've searched, but can't find ...
-1
votes
3answers
2k views

SCP Asking for Password with RSA Key

I've followed a few tutorials on setting up RSA Public Key Authentication, but I cannot seem to get it to work. I can SSH into the remote machine without a password, but when I try and scp files, I ...
0
votes
1answer
1k views

How to convert DER formatted public key file to PEM form

I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key. The command I have used - openssl ...
1
vote
3answers
1k views

ssh via public key authentication for users administered with NIS

I'm experimenting with using NIS for centralizing the user management for a network of approx 20 servers. I've got an NIS client and server working, and can ssh to the client machine and successfully ...
4
votes
3answers
2k views

ssh still accepts password authentication despite being configured for public-key only authentication (which works!)

I have configured an Ubuntu 10.04LTS desktop install to only allow public key authentication. RESULT: public key authentication works perfectly! QUESTION: The problem is that despite being ...
0
votes
0answers
100 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
5
votes
1answer
3k views

Force SSH public key authentication for specific users

Is it possible to force specific users to login with public key, while allowing other users to login with password? Since public key authentication (with passphrase) is stronger than password-only ...
1
vote
2answers
81 views

sshd: logging client's public key

I need to run an SSH server and log the IP & public key of any client that attempts to connect (without actually granting access). The use case is this: I deploy this web app to a remote host ...
2
votes
1answer
256 views

ssh command line specify server host key fingerprint

Using ssh command line (OpenSSH), can I specify the server's host key fingerprint? This is possible with winscp.com using (e.g.) -hostkey="ssh-rsa 2048 AA:BB:CC...etc I have read the man page a ...
1
vote
1answer
1k views

Webmin + SSH Public Key [closed]

Is it possible to upload a UNIX user's public key to Webmin? I would think this would be on this screen, but I'm not finding it....
21
votes
2answers
10k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
-1
votes
1answer
507 views

PEM File “CERTIFICATE” vs “PUBLIC KEY”

I have a PEM file that looks like: -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- which I can convert to another PEM file using: openssl x509 -in key.crt -pubkey -noout. The new PEM file ...
3
votes
3answers
2k views

SSH Public Key Format

I have a public key in the format: ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "somename-20060227" AAAAB3NzaC1yc2EAAAABJQAAAIBmhLUTJiP[and so on]== ---- END SSH2 PUBLIC KEY ---- Usually I see keys ...
9
votes
5answers
2k views

Why does a SSH public key sit on the server and not with the client?

I don't quite understand the theory behind keeping public keys on the server. In the lockbox analogy of public/private keys, to unlock Alice's box, Alice holds the private key while the public key is ...
0
votes
0answers
230 views

Installing PostgreSQL on Centos 5

I'm following the instructions from here. I try and run yum localinstall http://yum.postgresql.org/9.4/redhat/rhel-5-i386/pgdg-centos94-9.4-1.noarch.rpm which returns the fault cannot open file... ...
0
votes
1answer
373 views

SSH key stopped working on Ubuntu Azure VPS

I have an Ubuntu instance that I'm running on Azure. I've been using it for the last 6 months or so to level up my novice Linux admin skills. Yesterday I was configuring a Capistrano deployment to ...
0
votes
1answer
55 views

After Updating to SHA2, private and public doesn't match

I've upgraded to SHA2 certificate, but after upgrading the new certificate key doesn't match my old private key. Public key has changed after updating and it doesn't match to previous private key. ...
2
votes
1answer
149 views

Restrict SSH login to public key from public networks, but allow password from internal networks

Assume UserA is allowed to log in by SSH to a server from public networks as well as from within private ones. Is there any option to restrict password-enabled logins to the private networks while ...
5
votes
1answer
888 views

What is the purpose of a custom Certificate Trust List?

You can create and deploy a certificate trust list as detailed here, but I'm trying to understand the advantages of this over just deploying root and intermediate certs with group policy the normal ...
0
votes
4answers
339 views

SSH Public Key Authentication Fails Mac OSX

I am trying to get a coworkers MacBook Air running on Public Key Authentication and even after generating a new SSH key I haven't been able to get it to run like I have mine. Double checked file ...
14
votes
2answers
2k views

Linux ssh: allow public-key authentication without giving user read rights to private key

Users logged in on my Linux server should be able to ssh to a specific remote machine with a default account. The authentication on the remote machine uses public key, so on the server the ...