The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
38 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
-1
votes
1answer
28 views

AWS EC2 Instance rejected public key

I just launched a AWS EC2 Image today, I got to authenticate successfully and I did the following changes: sudo yum update Install Oracle JDK 8_92 using wget Remove all other java options export ...
0
votes
1answer
41 views

Access with ssh only password without publickey with virtualbox

I tried to setup the ssh-server without publickey , with openssh-server 6.7p1-5 changed sshd_config RSAAuthentication no PubkeyAuthentication no PasswordAuthentication yes Restart ssh service ...
23
votes
2answers
23k views

Multiple public keys for one user

This question is similar to SSH public key authentication - can one public key be used for multiple users? but it's the other way around. I'm experimenting on using ssh so any ssh server would work ...
-1
votes
3answers
44 views

Permission denied (publickey) for my AWS EC2 instance from another computer

I have a public key file say dummy.pem and i copied this to another computer from where i need to access my EC2 instance. But it says @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ ...
0
votes
0answers
14 views

SSH not logging failed key authenticated logins from valid users [duplicate]

For some reason OpenSSH is not logging the failed logins in /var/log/btmp (lastb) of valid users when I am authenticating with an SSH Key. On the other hand It logs failed and successfull logins from ...
-1
votes
1answer
16 views

Restrict su - user for a user having public-private key pair

We have a user named user_root in our Linux environment. For which we have created the key-pair in AWS. This is our root user and our administrators log in with this username and the ppk file. We ...
1
vote
1answer
51 views

Why won't my SSH keys forward properly?

I'm trying to ssh from my machine to another machine and from there to a third machine. When I do it manually, it works like this: localhost$ scp ~/.ssh/id_rsa myuser@myhost.something.something.com:. ...
11
votes
6answers
38k views

Debian. How can I securely get debian-archive-keyring, so that I can do an apt-get update? NO_PUBKEY

I have a catch 22 trying to: # apt-get update [... good lines omitted] W: GPG error: http://backports.debian.org lenny-backports Release: The following signatures couldn't be verified ...
11
votes
2answers
11k views

Authentication Order with SSH

When I login via ssh with -v I see that ssh is authenticating the following way debug1: Authentications that can continue: publickey,gssapi-with-mic,password,hostbased I would like to change the ...
0
votes
1answer
35 views

Centos requires me to change my password while I'm using private keys

I tried to login to my remote CentOS server using my private key and I was surprised to get this message : There were 29031 failed login attempts since the last successful login. After that it ...
2
votes
1answer
7k views

How to configure public-key authentication with vsftpd?

The documentation of vsftpd is quite good (https://security.appspot.com/vsftpd/vsftpd_conf.html), however I cannot find some details on how to use public key authentication. I know that I need ...
0
votes
0answers
80 views

Why is my private key accepted on SSH only after I login on the target machine?

I have an interesting situation which I'm not even sure where to begin to investigate from. I have a Ubuntu 12.04 server with SSH locked down to PK-auth. When I reboot my server, and try to SSH into ...
4
votes
6answers
6k views

SSH public key login fails without pattern

(previously posted at stackoverflow by error) I'm running a bunch of servers with Ubuntu 14.04.1 (sun,hyperion,...) all of which use public keys (OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 on all ...
0
votes
1answer
26 views

How to use PuttyGen.exe when moving key(s) from old machine to a new machine?

I've only generated the public/private key pair in PuttyGen.exe once. This was the first time I've ever used this tool. Rather than having the folks hosting the server that I'm connecting to, who ...
4
votes
5answers
19k views

certutil: function failed: security library: bad database

when I'm using certutil it returns this error: certutil: function failed: security library: bad database. e.g. I can't list certs or keys How Can I fix this?
0
votes
3answers
266 views

Now to add ssh publickey to Clustered NetApp for Active Directory user?

I am trying to load my ssh public key on a netapp instace but it seems that it does not allow me to add my key. lcy2-dosvm01::security login publickey> load-from-uri -uri ...
1
vote
2answers
4k views

Adding new user to AWS EC2 - Permission denied (publickey)

I am trying to set up a new user for my AWS EC2. I have followed step by step this tutorial but I get Permission denied (publickey) error. I tried as well creating a newuser-key-pair.pem from AWS EC2 ...
1
vote
1answer
49 views

Google Cloud auth access key secret key?

Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
15
votes
1answer
8k views

Add comment to existing SSH public key

I have an existing SSH key (public and private), that was created with ssh-keygen. How can I add a comment to this existing key?
136
votes
2answers
44k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
-2
votes
3answers
36 views

How to connect to a SFTP [closed]

Got a SFTP Hostname username password from someone and he gave me a Server RSA public key fingerprint like this: d2:h4:h5:gf:f4 etcetera. But how do i need to connect to this host, doesnt this ...
1
vote
1answer
153 views

How can I get sshd to tell me why it's failing public key authentications? [closed]

I'm using OpenSSH 6.9p1 (on Lubuntu) as my SSH server. When trying to connect to it (using an SSH client in Cygwin), I keep being reverted to password authentication, despite having properly generated ...
-2
votes
1answer
112 views

EC2 key pair authentication

I've created a custom ec2 ami image and trying to authenticate aws instance by using ec2 key pair authentication for a user USERVM by following below steps. ami creation . ec2-run-instances ... ...
0
votes
0answers
291 views

How to install a strong ephemeral Diffie-Hellman public key on windows server 2008 r2?

I have a server running windows server 2008 R2, which sits on my LAN. I'm a programmer rather than a server administrator, so I don't know how make the security on the server stronger. When I ...
-2
votes
1answer
96 views

Unable to disable SSH public key authentication and enable password authentication

I have a google compute engine instance, and I want to disable public key authentication (yes I know that it's a bad idea, before people jump in on me, just bear with me here) and in its place enable ...
0
votes
1answer
1k views

SSH key stopped working, still works on other servers

I've got about a dozen servers that I log into via an authorised ssh key, and up until today it was working fine. Today, one of those servers refuses to accept my key - it accepts a root key and my ...
1
vote
1answer
2k views

Non-interactive SSH connection fails - error: can't open /dev/tty: No such device or address; Host key verification failed

Below you can see the log. The connection is from a Cygwin SSH client to a Cygwin SSHD server. The connection works ok when launched from the command line but fails when launched from Jenkins (Java ...
1
vote
2answers
50 views

openssl smime message signing: why do I need a -certfile key?

Here is how one should sign a message with openssl smime? according to the docs openssl smime -sign -in in.txt -text -out mail.msg -signer mycert.pem \ -inkey mykey.pem -certfile mycerts.pem But ...
2
votes
1answer
258 views

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem ...
1
vote
0answers
49 views

Public Key Pinning and subdomains [closed]

Shortly I have intend to install new webserver and I'd like to secure users a little bit more. I already have domain, (virtual) server and everything else that matters when configuring a server. ...
-1
votes
1answer
24 views

Location for private key file for SFTP user

I would like to create a user account that can access web server files. I could set the home directory of this user to /var/www now, but the standard location for the authorized_keys file is in the ...
0
votes
4answers
7k views

How to get a .pem file from ssh key pair?

I created a key pair using ssh-keygen and get the two clasic id_rsa and id_rsa.pub. I imported the public key into my AWS EC2 account. Now I created a windows instance and to decrypt that instance ...
0
votes
2answers
90 views

OpenSSH: allow users with writeable HOME to use publick key authentication

On a local workstation I need to have a handful of users to be able to freely write in each other $HOME. I KNOW this is a security breach and, in the specific situation, I do not care at all. I have ...
3
votes
1answer
123 views

How many SSH private key to setup for multiple servers?

The general process is to generate a pair of public and private keys and upload the public key to the server for SSH connection. Then, if I have to manage a large amount of servers, am I supposed to: ...
1
vote
2answers
253 views

Secure EC2 instance from logging without .pem file

I see here and here (under Connecting to Your Linux Instance if You Lose Your Private Key) ways to access EC2 instance without a .pem file that was created when the instance was created. I would like ...
0
votes
1answer
39 views

Add SSH user with sudo privilege, using pubkey

I need to add an account for someone to be able to SSH into my server and have sudo privileges. He has given me his pubkey which is something like: ssh-rsa AAAAfbfi40fdsfodudksjflksjdf..... ...
0
votes
1answer
23 views

SSH: Login to local pc by key

I got a little problem. I'm using apt-dater to keep different linux-systems updated. Apt-dater uses ssh to login to these systems - there's no problem by doing this. To connect to localhost, the ...
5
votes
2answers
645 views

Is it possible to use a gpg public key to encrypt a message without importing the key?

Sometimes I might want to use someone's gpg key to send a message but will have no need to ever use the key again. Importing the key in this instance seems unnecessary. I've searched, but can't find ...
-1
votes
3answers
2k views

SCP Asking for Password with RSA Key

I've followed a few tutorials on setting up RSA Public Key Authentication, but I cannot seem to get it to work. I can SSH into the remote machine without a password, but when I try and scp files, I ...
0
votes
1answer
1k views

How to convert DER formatted public key file to PEM form

I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key. The command I have used - openssl ...
1
vote
3answers
1k views

ssh via public key authentication for users administered with NIS

I'm experimenting with using NIS for centralizing the user management for a network of approx 20 servers. I've got an NIS client and server working, and can ssh to the client machine and successfully ...
4
votes
3answers
2k views

ssh still accepts password authentication despite being configured for public-key only authentication (which works!)

I have configured an Ubuntu 10.04LTS desktop install to only allow public key authentication. RESULT: public key authentication works perfectly! QUESTION: The problem is that despite being ...
0
votes
0answers
133 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
5
votes
1answer
3k views

Force SSH public key authentication for specific users

Is it possible to force specific users to login with public key, while allowing other users to login with password? Since public key authentication (with passphrase) is stronger than password-only ...
1
vote
2answers
85 views

sshd: logging client's public key

I need to run an SSH server and log the IP & public key of any client that attempts to connect (without actually granting access). The use case is this: I deploy this web app to a remote host ...
2
votes
1answer
363 views

ssh command line specify server host key fingerprint

Using ssh command line (OpenSSH), can I specify the server's host key fingerprint? This is possible with winscp.com using (e.g.) -hostkey="ssh-rsa 2048 AA:BB:CC...etc I have read the man page a ...
1
vote
1answer
1k views

Webmin + SSH Public Key [closed]

Is it possible to upload a UNIX user's public key to Webmin? I would think this would be on this screen, but I'm not finding it....
22
votes
2answers
11k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
-1
votes
1answer
952 views

PEM File “CERTIFICATE” vs “PUBLIC KEY”

I have a PEM file that looks like: -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- which I can convert to another PEM file using: openssl x509 -in key.crt -pubkey -noout. The new PEM file ...