The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
28 views

Forcing SSH login on Ubuntu 14.04 server not working

I've tried enabling SSH logins in my linux server. It can establish connection just fine trough my private key. I also went to /etc/ssh/ssh_config and edited the following field like this: ...
0
votes
1answer
23 views

Setting Host Fingerprint on New EC2 Instances

TL;DR Can I tell AWS EC2 to launch an instance from AMI but keep the host keys -- the ones in /etc/ssh that were saved with the AMI -- instead of generating new keys and overwriting the ones saved ...
2
votes
1answer
74 views

How to use DSA key pairs instead of RSA

For testing purposes, I would like to enable DSA authentication on my server (let's name it A). If I remove all the key pairs located under /etc/ssh, both RSA and DSA key pairs are generated on sshd ...
1
vote
1answer
19 views

No password login via RSA, but not SSH, using HTTPS?

I've successfully implemented no password login via RSA key exchange to SSH on Linux many times. What I'm hoping to do is achieve a similar authentication for my HTTPS RESTful web services, but I ...
2
votes
1answer
300 views

OpenVPN ssl VERIFY ERROR: depth=0, error=certificate signature failure in TI am335x-evm platform

I try to porting the openVPN client (2.3.8) to ARMS embedded device. After setting cross compile I was able to run in ARMS, somehow, when I lanuch the openvpn in ARMS, it show error : VERIFY ERROR: ...
0
votes
0answers
50 views

Cannot enable SSHv2 on my Cisco 3560

I searched google for an answer to why I can't enter this command, but I'm stumped. Please help! Cisco 3560 48p PoE 12.2(53)SE2 (config)#ip ssh version 2 Please create RSA keys to enable SSH (of ...
1
vote
0answers
147 views

Remote Desktop + Two Factor

My boss has asked me to come up with a way to implement dual factor authentication for RDP access to servers. So, when any of my fellow admins remotely log into a server via RDP they must go through ...
2
votes
1answer
150 views

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem ...
2
votes
2answers
1k views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...
0
votes
1answer
311 views

Generating a CSR fails with 'routines:RSA_sign:digest too big for rsa' - for heroku

I tried generating a CSR by following Heroku instructions. Specifically openssl genrsa -des3 -out server.pass.key 2048 openssl rsa -in server.pass.key -out server.key openssl req -nodes -new -key ...
0
votes
1answer
1k views

How to convert DER formatted public key file to PEM form

I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key. The command I have used - openssl ...
0
votes
0answers
100 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
1
vote
1answer
84 views

Apache 2.4.7 does not accept RSA ciphers but openssl does

# apachectl -version Server version: Apache/2.4.7 (Ubuntu) Server built: Jul 22 2014 14:36:38 I've got ssl.conf configured with the default SSLCipherSuite (SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5). ...
3
votes
1answer
4k views

Cannot decrypt private key eventhough I know pass-phrase

I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure... I am trying to use ...
0
votes
0answers
67 views

Generating an azure .pem file that has a passphrase?

So I've been trying to create a .pem file to securely access my server in Azure, but when I run this command in the terminal, which is from their help documents.. openssl req -x509 -nodes -days 365 ...
0
votes
1answer
1k views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
0
votes
2answers
1k views

Why can't I enable SSHv2 on my Cisco 3750X?

It seemed simple enough: use ip ssh version 2. This was the result: 3750xCoreStack(config)#ip ssh version 2 Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2). ...
0
votes
1answer
52 views

Is my private key safe if I use authenticaiton agent forwarding with the ssh -A option?

I love the option to connect to servers via SSH with the -A option, so I can use my private keys on the server. This lets me update git/svn repositories and connect to other servers without the need ...
1
vote
3answers
1k views

Why ssh uses .ssh/id_rsa as a pubkeyauthentication?

When trying to ssh -v 'somehost' Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Offering RSA public key: /home/kaldown/.ssh/id_rsa debug1: ...
0
votes
0answers
84 views

Multiple public RSA keys on server, sharing same SSH login details

At my company we use SSH to access a server in order to deploy projects through GIT. We share the same SSH login details to access the server. When I log in I always get prompted to enter the ...
-1
votes
2answers
159 views

Copy the rsa keys from one machine to another

Someone asked me to provide my public id_rsa key to make be able to connect to their server via ssh. I did so and it's working fine. I want to do that from my another laptop as well without having to ...
2
votes
1answer
4k views

Auto accept rsa key fingerprint from command line

I've tried yes | ssh root@10.x.x.x to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
2
votes
2answers
13k views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
-7
votes
1answer
263 views

Is the ssh key name a part of the authentication? [closed]

The ssh public keys in authorized_hosts have three parts - a type, the key and a name. For example, an rsa key might look like: ssh-rsa ...
0
votes
1answer
761 views

centos 6.5 ssh rsa key fails

Alright I have read many many articles and followed a few different tutorials and I can not get my RSA key to work on my centos servers. The servers are running centos 6.5 with FreePBX on them and I ...
2
votes
0answers
2k views

Authentication Microsoft AD Users with RSA SecurID

I have an integration problem between RSA SecurID and Microsoft AD described in the picture below: 1.The user needs to connect to private network via VPN and authenticates to the Firewall via its ...
0
votes
1answer
217 views

Ubuntu 14.04 asking for pass phrase to unlock RSA key oddity.

Sorry for the obscure title but I have no idea how to phrase this.. I am having an oddity occurring with my RSA key, I use RSA key authentication over SSH for all my servers and other services where ...
0
votes
1answer
708 views

Server Remote Console Stopped working after reboot

I was working on IBM x3650 M4 Physical server running Red Hat 6.4 with HA LVM. I upgraded the kernel to latest version and reboot it. The server came up just fine and booted with latest kernel. Then ...
-1
votes
2answers
340 views

Putting My RSA Public Key on RSA Key-Secured Server

Hello and thanks for reading, Basically, I'm taking over for someone on some system admin duties, learning as I go, but one problem I've run into is not having my public RSA key put onto a particular ...
1
vote
1answer
42 views

Is there any methods to accelerate RSA?

We can use Intel's AESNI to accelerate AES encoding/decoding. But in a SSL session, before AES we have to use RSA to exchange keys; are there any methods to accelerate RSA also?
-1
votes
1answer
2k views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
-1
votes
3answers
211 views

What will be the ill effects of turning off and on server daily

I have IBM server x 3850 M2 with remote system adapter. It has 128GB RAM and 4 SAS drives Its basically for my home labs , developmenet and testing I think that if i make it on 24 x 7 then i will ...
1
vote
2answers
261 views

ssh rsa or dsa connection fail [closed]

I explain steps for make rsa key. create rsa key [user@host01 .ssh]$ ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (/home/user/.ssh/id_rsa): Enter ...
5
votes
1answer
2k views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
4
votes
1answer
875 views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
1
vote
1answer
273 views

Bash script for updating multiple servers not accepting RSA keys

In my environment I manage about 10 Linux servers that require regular package updates. I have a script written to connect to each individually and run the update. Additionally, I have RSA keys ...
3
votes
1answer
81 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
5
votes
1answer
2k views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
0
votes
0answers
292 views

How to integrate RSA with AS DS?

I have not been able to find anything online that isn't AD FS. Since I do not run AD FS, is there a way to integrate RSA Securid with just AD DS? Any online resources? Also, this is a 2012 server.
2
votes
1answer
4k views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
-2
votes
1answer
3k views

Impossible to connect ssh /root/.ssh/known_hosts': No such file or directory

I can't connect to my server with ssh. I have already started a session with ssh but i know if i quit this session, i won't be able to connect again to my server. ssh root@genese.com ...
6
votes
1answer
2k views

ssh: id_rsa doesn't work, but if I rename it, it works

I have this id_rsa in my ~/.ssh folder. But it just doesn't authenticate. If I copy it and rename it to anything not id_rsa, it works. [qfan@mycomputer .ssh]$ ls -al id_rsa id_rsa_good -rw------- 1 ...
4
votes
2answers
5k views

Is disabling password login for SSH the same as deleting the password for all users?

I have a cloud server with only a root user. I SSH to it using RSA keys only. To make it more secure, I wanted to disable the password feature. I know that this can be done by editing the ...
1
vote
1answer
2k views

IBM Remote Supervisor Adapters(RSA ii) boot ISO

My company recently bought some add in IBM Remote Supervisor Adapters for our older x3550 servers. We got them installed and working, and left for the weekend. The idea was to get them to mount and ...
-2
votes
1answer
72 views

Do any well-known CAs issue Elliptic Curve certificates (now that all others are hackable)? [closed]

I know it had been asked before here, but that was back in 2009. Now that it is widely supported by browsers (Requires TLS 1.1, only added in Chrome 22+, FF 23 released Aug 8 2013, IE9+), AND can ...
1
vote
2answers
146 views

SSH: How to know when an RSA key has been trusted?

my laptop apparently has changed its RSA key, so when I connect to it over SSH, I get the message of REMOTE HOST IDENTIFICATION HAS CHANGED. I don't remember if the last time I've connected to my ...
2
votes
2answers
6k views

Create a public private key pair for certificate in IIS

I need to create a public/private key pair for a certificate request. I would like to use IIS. Once the certificate is signed I will be distributing it to multiple servers and therefor will need the ...
1
vote
0answers
1k views

The page isn't redirecting correctly?

I have a CentOS 6 VPS with GoDaddy: OS: Linux CentOS RAM: 4 GB Storage: 120 GB‡‡ Bandwidth: 4,000 GB/mo I have set up my domain/nameservers etc fine. As I’m using Plesk 11 I had to install ...
4
votes
5answers
14k views

SSH connection asks for password although key is accepted

I'm getting prompted for a password even though it looks like my SSH key is accepted. As far as I can tell, the line "Server accepts key: pkalg ssh-rsa blen 277" in the logs below mean my key is ...
0
votes
3answers
280 views

SSH connection with public RSA key

I have next configuration in our corporative network: Client: (artur@lothlorien.isd) /etc/ssh/ssh_config: Host * SendEnv LANG LC_* HashKnownHosts yes GSSAPIAuthentication yes ...