The tag has no usage guidance.

learn more… | top users | synonyms

-1
votes
1answer
29 views

Apache httpd won't start

I'm unable to start apache on El Capitan. Output of apachectl restart is: [Mon Apr 18 19:47:32 2016] [warn] NameVirtualHost *:8443 has no VirtualHosts [Mon Apr 18 19:47:32 2016] [warn] ...
1
vote
1answer
19 views

How EJBCA generate private key

I'm looking for the method used by EJBCA to generate the private keys in general (CA, Sub-Ca, certificates...). Let say for instance you want RSA 2048 key size. Is the generation process all done in ...
0
votes
0answers
20 views

CSR created for unrequested domains

Trying to create csr for domain.com only. Key first: # openssl genrsa -out domain.com.key 2048 Generating RSA private key, 2048 bit long modulus ...
1
vote
1answer
41 views

Why won't my SSH keys forward properly?

I'm trying to ssh from my machine to another machine and from there to a third machine. When I do it manually, it works like this: localhost$ scp ~/.ssh/id_rsa myuser@myhost.something.something.com:. ...
7
votes
2answers
70 views

Same RSA key on multiple PCs

Can I use my RSA private key on multiple computers i.e. my desktop and laptop. Or do I have to create a unique key for each computer I own, and add their respective public keys to necessary ...
-2
votes
1answer
44 views

ssh - Why isn't it trying my private key? [closed]

I'm trying to connect to a remote SSH server using a private key at ~/.ssh/id_rsa. When I ssh -v to the server I get the following: ... debug1: Authentications that can continue: publickey debug1: ...
2
votes
1answer
42 views

Keeping track of SSH private keys without comments

SSH public keys support comments (which simply consist of text appended to the end of the key), which makes it easy to identify an otherwise unidentifiable id_rsa.pub file. You can use the comment to ...
0
votes
1answer
34 views

Forcing SSH login on Ubuntu 14.04 server not working

I've tried enabling SSH logins in my linux server. It can establish connection just fine trough my private key. I also went to /etc/ssh/ssh_config and edited the following field like this: ...
0
votes
1answer
26 views

Setting Host Fingerprint on New EC2 Instances

TL;DR Can I tell AWS EC2 to launch an instance from AMI but keep the host keys -- the ones in /etc/ssh that were saved with the AMI -- instead of generating new keys and overwriting the ones saved ...
2
votes
1answer
146 views

How to use DSA key pairs instead of RSA

For testing purposes, I would like to enable DSA authentication on my server (let's name it A). If I remove all the key pairs located under /etc/ssh, both RSA and DSA key pairs are generated on sshd ...
1
vote
1answer
20 views

No password login via RSA, but not SSH, using HTTPS?

I've successfully implemented no password login via RSA key exchange to SSH on Linux many times. What I'm hoping to do is achieve a similar authentication for my HTTPS RESTful web services, but I ...
2
votes
1answer
457 views

OpenVPN ssl VERIFY ERROR: depth=0, error=certificate signature failure in TI am335x-evm platform

I try to porting the openVPN client (2.3.8) to ARMS embedded device. After setting cross compile I was able to run in ARMS, somehow, when I lanuch the openvpn in ARMS, it show error : VERIFY ERROR: ...
0
votes
0answers
68 views

Cannot enable SSHv2 on my Cisco 3560

I searched google for an answer to why I can't enter this command, but I'm stumped. Please help! Cisco 3560 48p PoE 12.2(53)SE2 (config)#ip ssh version 2 Please create RSA keys to enable SSH (of ...
1
vote
0answers
174 views

Remote Desktop + Two Factor

My boss has asked me to come up with a way to implement dual factor authentication for RDP access to servers. So, when any of my fellow admins remotely log into a server via RDP they must go through ...
2
votes
1answer
243 views

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem ...
1
vote
2answers
2k views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...
0
votes
1answer
415 views

Generating a CSR fails with 'routines:RSA_sign:digest too big for rsa' - for heroku

I tried generating a CSR by following Heroku instructions. Specifically openssl genrsa -des3 -out server.pass.key 2048 openssl rsa -in server.pass.key -out server.key openssl req -nodes -new -key ...
0
votes
1answer
1k views

How to convert DER formatted public key file to PEM form

I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key. The command I have used - openssl ...
0
votes
0answers
126 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
1
vote
1answer
90 views

Apache 2.4.7 does not accept RSA ciphers but openssl does

# apachectl -version Server version: Apache/2.4.7 (Ubuntu) Server built: Jul 22 2014 14:36:38 I've got ssl.conf configured with the default SSLCipherSuite (SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5). ...
3
votes
1answer
6k views

Cannot decrypt private key eventhough I know pass-phrase

I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure... I am trying to use ...
0
votes
1answer
1k views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
0
votes
2answers
2k views

Why can't I enable SSHv2 on my Cisco 3750X?

It seemed simple enough: use ip ssh version 2. This was the result: 3750xCoreStack(config)#ip ssh version 2 Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2). ...
0
votes
1answer
53 views

Is my private key safe if I use authenticaiton agent forwarding with the ssh -A option?

I love the option to connect to servers via SSH with the -A option, so I can use my private keys on the server. This lets me update git/svn repositories and connect to other servers without the need ...
1
vote
3answers
2k views

Why ssh uses .ssh/id_rsa as a pubkeyauthentication?

When trying to ssh -v 'somehost' Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Offering RSA public key: /home/kaldown/.ssh/id_rsa debug1: ...
0
votes
0answers
87 views

Multiple public RSA keys on server, sharing same SSH login details

At my company we use SSH to access a server in order to deploy projects through GIT. We share the same SSH login details to access the server. When I log in I always get prompted to enter the ...
-1
votes
2answers
169 views

Copy the rsa keys from one machine to another

Someone asked me to provide my public id_rsa key to make be able to connect to their server via ssh. I did so and it's working fine. I want to do that from my another laptop as well without having to ...
2
votes
1answer
5k views

Auto accept rsa key fingerprint from command line

I've tried yes | ssh root@10.x.x.x to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
2
votes
2answers
16k views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
-6
votes
1answer
343 views

Is the ssh key name a part of the authentication? [closed]

The ssh public keys in authorized_hosts have three parts - a type, the key and a name. For example, an rsa key might look like: ssh-rsa ...
0
votes
1answer
804 views

centos 6.5 ssh rsa key fails

Alright I have read many many articles and followed a few different tutorials and I can not get my RSA key to work on my centos servers. The servers are running centos 6.5 with FreePBX on them and I ...
2
votes
0answers
3k views

Authentication Microsoft AD Users with RSA SecurID

I have an integration problem between RSA SecurID and Microsoft AD described in the picture below: 1.The user needs to connect to private network via VPN and authenticates to the Firewall via its ...
0
votes
1answer
235 views

Ubuntu 14.04 asking for pass phrase to unlock RSA key oddity.

Sorry for the obscure title but I have no idea how to phrase this.. I am having an oddity occurring with my RSA key, I use RSA key authentication over SSH for all my servers and other services where ...
0
votes
1answer
815 views

Server Remote Console Stopped working after reboot

I was working on IBM x3650 M4 Physical server running Red Hat 6.4 with HA LVM. I upgraded the kernel to latest version and reboot it. The server came up just fine and booted with latest kernel. Then ...
-1
votes
2answers
388 views

Putting My RSA Public Key on RSA Key-Secured Server

Hello and thanks for reading, Basically, I'm taking over for someone on some system admin duties, learning as I go, but one problem I've run into is not having my public RSA key put onto a particular ...
1
vote
1answer
47 views

Is there any methods to accelerate RSA?

We can use Intel's AESNI to accelerate AES encoding/decoding. But in a SSL session, before AES we have to use RSA to exchange keys; are there any methods to accelerate RSA also?
-1
votes
1answer
3k views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
-1
votes
3answers
222 views

What will be the ill effects of turning off and on server daily

I have IBM server x 3850 M2 with remote system adapter. It has 128GB RAM and 4 SAS drives Its basically for my home labs , developmenet and testing I think that if i make it on 24 x 7 then i will ...
1
vote
2answers
275 views

ssh rsa or dsa connection fail [closed]

I explain steps for make rsa key. create rsa key [user@host01 .ssh]$ ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (/home/user/.ssh/id_rsa): Enter ...
5
votes
1answer
3k views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
4
votes
1answer
1k views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
1
vote
1answer
293 views

Bash script for updating multiple servers not accepting RSA keys

In my environment I manage about 10 Linux servers that require regular package updates. I have a script written to connect to each individually and run the update. Additionally, I have RSA keys ...
3
votes
1answer
85 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
0
votes
0answers
321 views

How to integrate RSA with AS DS?

I have not been able to find anything online that isn't AD FS. Since I do not run AD FS, is there a way to integrate RSA Securid with just AD DS? Any online resources? Also, this is a 2012 server.
2
votes
1answer
4k views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
-2
votes
1answer
3k views

Impossible to connect ssh /root/.ssh/known_hosts': No such file or directory

I can't connect to my server with ssh. I have already started a session with ssh but i know if i quit this session, i won't be able to connect again to my server. ssh root@genese.com ...
7
votes
1answer
2k views

ssh: id_rsa doesn't work, but if I rename it, it works

I have this id_rsa in my ~/.ssh folder. But it just doesn't authenticate. If I copy it and rename it to anything not id_rsa, it works. [qfan@mycomputer .ssh]$ ls -al id_rsa id_rsa_good -rw------- 1 ...
4
votes
2answers
6k views

Is disabling password login for SSH the same as deleting the password for all users?

I have a cloud server with only a root user. I SSH to it using RSA keys only. To make it more secure, I wanted to disable the password feature. I know that this can be done by editing the ...
1
vote
1answer
2k views

IBM Remote Supervisor Adapters(RSA ii) boot ISO

My company recently bought some add in IBM Remote Supervisor Adapters for our older x3550 servers. We got them installed and working, and left for the weekend. The idea was to get them to mount and ...
-2
votes
1answer
72 views

Do any well-known CAs issue Elliptic Curve certificates (now that all others are hackable)? [closed]

I know it had been asked before here, but that was back in 2009. Now that it is widely supported by browsers (Requires TLS 1.1, only added in Chrome 22+, FF 23 released Aug 8 2013, IE9+), AND can ...