The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
26 views

SFTP key issue? java.security.InvalidAlgorithmParameterException

I'm attempting to use my applications SFTP client test connection to connect to the MF but I'm getting the error: Test of SFTP user alias GLDFundingEngine_User failed. Details: Session.connect: ...
0
votes
3answers
155 views

Passwordless root SSH on CentOS 6 with public key

I am trying to create a "passwordless" setup so that the remote server is more secure without password + I can automate the login process. I have created a new ssh key with ssh-keygen, and copied the ...
-3
votes
1answer
30 views

How to export private key? (GnuPG) [closed]

I have successfully created GnuPG public/private key pair using RSA and RSA algorithm. But I can't figure out a way to export public key and private key in the form of file with .asc extension. I am ...
0
votes
0answers
36 views

How to configure RSA Archer for Single Sign-On (reverse proxy)

Trying to setup RSA archer to run behind a reverse proxy and accept an HTTP header as an authenticated user. Most applications will accept REMOTE_USER or some arbitrary header and process that user ...
0
votes
1answer
71 views

Access with ssh only password without publickey with virtualbox

I tried to setup the ssh-server without publickey , with openssh-server 6.7p1-5 changed sshd_config RSAAuthentication no PubkeyAuthentication no PasswordAuthentication yes Restart ssh service ...
-1
votes
1answer
53 views

Apache httpd won't start

I'm unable to start apache on El Capitan. Output of apachectl restart is: [Mon Apr 18 19:47:32 2016] [warn] NameVirtualHost *:8443 has no VirtualHosts [Mon Apr 18 19:47:32 2016] [warn] ...
1
vote
1answer
32 views

How EJBCA generate private key

I'm looking for the method used by EJBCA to generate the private keys in general (CA, Sub-Ca, certificates...). Let say for instance you want RSA 2048 key size. Is the generation process all done in ...
0
votes
0answers
21 views

CSR created for unrequested domains

Trying to create csr for domain.com only. Key first: # openssl genrsa -out domain.com.key 2048 Generating RSA private key, 2048 bit long modulus .........................................................
1
vote
1answer
58 views

Why won't my SSH keys forward properly?

I'm trying to ssh from my machine to another machine and from there to a third machine. When I do it manually, it works like this: localhost$ scp ~/.ssh/id_rsa myuser@myhost.something.something.com:. ...
7
votes
2answers
75 views

Same RSA key on multiple PCs

Can I use my RSA private key on multiple computers i.e. my desktop and laptop. Or do I have to create a unique key for each computer I own, and add their respective public keys to necessary servers/...
-2
votes
1answer
58 views

ssh - Why isn't it trying my private key? [closed]

I'm trying to connect to a remote SSH server using a private key at ~/.ssh/id_rsa. When I ssh -v to the server I get the following: ... debug1: Authentications that can continue: publickey debug1: ...
2
votes
1answer
50 views

Keeping track of SSH private keys without comments

SSH public keys support comments (which simply consist of text appended to the end of the key), which makes it easy to identify an otherwise unidentifiable id_rsa.pub file. You can use the comment to ...
0
votes
1answer
38 views

Forcing SSH login on Ubuntu 14.04 server not working

I've tried enabling SSH logins in my linux server. It can establish connection just fine trough my private key. I also went to /etc/ssh/ssh_config and edited the following field like this: ...
0
votes
1answer
28 views

Setting Host Fingerprint on New EC2 Instances

TL;DR Can I tell AWS EC2 to launch an instance from AMI but keep the host keys -- the ones in /etc/ssh that were saved with the AMI -- instead of generating new keys and overwriting the ones saved ...
2
votes
1answer
213 views

How to use DSA key pairs instead of RSA

For testing purposes, I would like to enable DSA authentication on my server (let's name it A). If I remove all the key pairs located under /etc/ssh, both RSA and DSA key pairs are generated on sshd ...
1
vote
1answer
20 views

No password login via RSA, but not SSH, using HTTPS?

I've successfully implemented no password login via RSA key exchange to SSH on Linux many times. What I'm hoping to do is achieve a similar authentication for my HTTPS RESTful web services, but I don'...
2
votes
1answer
661 views

OpenVPN ssl VERIFY ERROR: depth=0, error=certificate signature failure in TI am335x-evm platform

I try to porting the openVPN client (2.3.8) to ARMS embedded device. After setting cross compile I was able to run in ARMS, somehow, when I lanuch the openvpn in ARMS, it show error : VERIFY ERROR: ...
0
votes
0answers
84 views

Cannot enable SSHv2 on my Cisco 3560

I searched google for an answer to why I can't enter this command, but I'm stumped. Please help! Cisco 3560 48p PoE 12.2(53)SE2 (config)#ip ssh version 2 Please create RSA keys to enable SSH (of ...
1
vote
0answers
201 views

Remote Desktop + Two Factor

My boss has asked me to come up with a way to implement dual factor authentication for RDP access to servers. So, when any of my fellow admins remotely log into a server via RDP they must go through ...
2
votes
1answer
311 views

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem ...
1
vote
2answers
2k views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...
0
votes
1answer
554 views

Generating a CSR fails with 'routines:RSA_sign:digest too big for rsa' - for heroku

I tried generating a CSR by following Heroku instructions. Specifically openssl genrsa -des3 -out server.pass.key 2048 openssl rsa -in server.pass.key -out server.key openssl req -nodes -new -key ...
0
votes
1answer
2k views

How to convert DER formatted public key file to PEM form

I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key. The command I have used - openssl ...
0
votes
0answers
152 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
1
vote
1answer
94 views

Apache 2.4.7 does not accept RSA ciphers but openssl does

# apachectl -version Server version: Apache/2.4.7 (Ubuntu) Server built: Jul 22 2014 14:36:38 I've got ssl.conf configured with the default SSLCipherSuite (SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5). ...
3
votes
1answer
8k views

Cannot decrypt private key eventhough I know passphrase

I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure. I am trying to use standard ...
0
votes
1answer
1k views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
0
votes
2answers
2k views

Why can't I enable SSHv2 on my Cisco 3750X?

It seemed simple enough: use ip ssh version 2. This was the result: 3750xCoreStack(config)#ip ssh version 2 Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2). ...
0
votes
1answer
54 views

Is my private key safe if I use authenticaiton agent forwarding with the ssh -A option?

I love the option to connect to servers via SSH with the -A option, so I can use my private keys on the server. This lets me update git/svn repositories and connect to other servers without the need ...
1
vote
3answers
2k views

Why ssh uses .ssh/id_rsa as a pubkeyauthentication?

When trying to ssh -v 'somehost' Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Offering RSA public key: /home/kaldown/.ssh/id_rsa debug1: ...
0
votes
0answers
91 views

Multiple public RSA keys on server, sharing same SSH login details

At my company we use SSH to access a server in order to deploy projects through GIT. We share the same SSH login details to access the server. When I log in I always get prompted to enter the pass-...
-1
votes
2answers
184 views

Copy the rsa keys from one machine to another

Someone asked me to provide my public id_rsa key to make be able to connect to their server via ssh. I did so and it's working fine. I want to do that from my another laptop as well without having to ...
2
votes
1answer
6k views

Auto accept rsa key fingerprint from command line

I've tried yes | ssh root@10.x.x.x to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
2
votes
2answers
19k views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
-6
votes
1answer
479 views

Is the ssh key name a part of the authentication? [closed]

The ssh public keys in authorized_hosts have three parts - a type, the key and a name. For example, an rsa key might look like: ssh-rsa gn29JyDdiyLFlggptrCxgzS6diAF6o94Dtg<abbreviated>oF9grbm7g+...
0
votes
1answer
862 views

centos 6.5 ssh rsa key fails

Alright I have read many many articles and followed a few different tutorials and I can not get my RSA key to work on my centos servers. The servers are running centos 6.5 with FreePBX on them and I ...
2
votes
0answers
3k views

Authentication Microsoft AD Users with RSA SecurID

I have an integration problem between RSA SecurID and Microsoft AD described in the picture below: 1.The user needs to connect to private network via VPN and authenticates to the Firewall via its ...
0
votes
1answer
250 views

Ubuntu 14.04 asking for pass phrase to unlock RSA key oddity.

Sorry for the obscure title but I have no idea how to phrase this.. I am having an oddity occurring with my RSA key, I use RSA key authentication over SSH for all my servers and other services where ...
0
votes
1answer
928 views

Server Remote Console Stopped working after reboot

I was working on IBM x3650 M4 Physical server running Red Hat 6.4 with HA LVM. I upgraded the kernel to latest version and reboot it. The server came up just fine and booted with latest kernel. Then ...
-1
votes
2answers
414 views

Putting My RSA Public Key on RSA Key-Secured Server

Hello and thanks for reading, Basically, I'm taking over for someone on some system admin duties, learning as I go, but one problem I've run into is not having my public RSA key put onto a particular ...
1
vote
1answer
47 views

Is there any methods to accelerate RSA?

We can use Intel's AESNI to accelerate AES encoding/decoding. But in a SSL session, before AES we have to use RSA to exchange keys; are there any methods to accelerate RSA also?
-1
votes
1answer
3k views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
-1
votes
3answers
234 views

What will be the ill effects of turning off and on server daily

I have IBM server x 3850 M2 with remote system adapter. It has 128GB RAM and 4 SAS drives Its basically for my home labs , developmenet and testing I think that if i make it on 24 x 7 then i will ...
1
vote
2answers
288 views

ssh rsa or dsa connection fail [closed]

I explain steps for make rsa key. create rsa key [user@host01 .ssh]$ ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (/home/user/.ssh/id_rsa): Enter ...
5
votes
1answer
3k views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and (http://blog.cloudflare.com/ecdsa-the-digital-...
4
votes
1answer
1k views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
1
vote
1answer
306 views

Bash script for updating multiple servers not accepting RSA keys

In my environment I manage about 10 Linux servers that require regular package updates. I have a script written to connect to each individually and run the update. Additionally, I have RSA keys ...
3
votes
1answer
94 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
0
votes
0answers
362 views

How to integrate RSA with AS DS?

I have not been able to find anything online that isn't AD FS. Since I do not run AD FS, is there a way to integrate RSA Securid with just AD DS? Any online resources? Also, this is a 2012 server.
2
votes
1answer
5k views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...