The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
96 views

What's the most compact way to store a password-protected RSA key?

I've tried converting a PEM-encoded key to DER format, and it appears the password is stripped regardless of the -passout argument. Example: openssl rsa -in tmp.pem -outform DER -out tmp.der -passin ...
5
votes
2answers
354 views

When routers communicate with HTTPS, how is their identity confirmed?

There's something I don't understand. Possibly I have some misunderstanding about how HTTPS works. I heard that some wireless routers allow the user to access the administration page with HTTPS ...
0
votes
2answers
536 views

setting minimum size of accepted rsa key

Is there a way to set the minimum size accepted by sshd as an RSA public key? I want to restrict users to using RSA keys that are generated with ssh-keygen -b 8196 or greater. I didn't see any ...
0
votes
1answer
243 views

Is it safe to share easy-rsa keys between machines? How?

I have two vpn hosts, vpn1 being the primary, vpn2 being a hot failover machine for cases where vpn1 goes down, either planned or unplanned. Right now, we manage client keys using the easy-rsa shell ...
202
votes
19answers
254k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
0
votes
1answer
5k views

RSA Authentication Manager - Unable to resolve principal by login ID and/or alias

I'm attempting to setup a RSA authentication manager with a Microsoft Active Directory as the identity source. When I try to login from the Windows login client the login attempt failed and I recieve ...
3
votes
5answers
6k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
1
vote
0answers
834 views

unable to logon because of account restriction on Domain Controller

I have a Domain Controller which had installed RSA SecurID software Few months ago we switched from RSA SecurID to Gemalto smart cards. This DC was the last machine with RSA software installed ...
4
votes
3answers
7k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
4
votes
4answers
2k views

OpenSSH : Key-based authorization, maximum key length

I'am using Putty on windows with key-based authentication to access some of mine servers. It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on ...
10
votes
3answers
12k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
1
vote
1answer
491 views

SSH with public/private key to iMac fails

I'm trying to connect to my iMac (server) from my macbook (client) on my LAN. Both have Mac OS X 10.6.4. Server running on a new clean install of the OS. When just activating Remote Login in System ...
6
votes
1answer
6k views

RSA key, github keeps asking for my password

Okay folks, noob RSA question here. I have a production server, and I've generated an rsa key there. I've then taken the public key (id_rsa.pub) and given that to github, as a deploy key I believe. ...
1
vote
5answers
5k views

sshd shuts down with “No supported key exchange algorithms” error

sshd $ /usr/sbin/sshd -f testconfig -p 22025 -d debug1: sshd version OpenSSH_5.2p1 debug1: private host key: #0 type 0 RSA1 debug1: read PEM private key done: type RSA debug1: private host key: #1 ...
1
vote
1answer
509 views

How to run RSA software fob on Ubuntu?

I am using RSA software fob on windows. I want to use software fob on ubuntu. I didnot find any relevant software on RSA website for using software fob on ubuntu. I tried to use RSA firefox plugin but ...
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
0
votes
1answer
120 views

Can I use authorized keys for user not 'root'

I used this tutorial to login into root without using password. Is there any way to make this work for normal user , not root user
1
vote
4answers
577 views

Enabling publickey authentication for server's sshd

I have two servers running RHEL 5. Both have nearly identical configurations. I have set up RSA Publickey authetication on both, and one works but the other does not: [my_user@client] $ ssh ...
2
votes
3answers
438 views

Anyone know if there's a way to report on “lost status” tokens in RSA?

I want to get a report of all users whose tokens are in "lost status" from RSA. Is this do-able?
3
votes
2answers
1k views

Ubuntu 9.10 RSA authentication: ssh fails, filezilla runs fine

This is quite a mistery for me. I usually use passwordless RSA authentication to login into my remote *nix servers with ssh and sftp. Never had any problem until now. I cannot connect to an Ubuntu ...
0
votes
6answers
4k views

software version of the RSA SecurID?

Is there a software version of the securID fob below: I remember reading that the algorithm for the key generation had been broken & that there was a software utility available, where if you ...
13
votes
4answers
5k views

Using PGP keys for SSH

I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
89
votes
6answers
28k views

SSH keypair generation: RSA or DSA?

SSH supports two signature algorithms for key pairs: RSA and DSA. Which is preferred, if any? For RSA, what is the minimum acceptable key length?
0
votes
2answers
3k views

DES warning message when connecting to Cisco ASA via SSH

I had to replace a Cisco ASA 5510 that died. I have everything back up and running however when I connect to the ASA via SSH (through Putty), I receive the following warning message: "The first ...
2
votes
5answers
491 views

Are RSA keys needed for LAN only setups?

I have an SSH installed on my Ubuntu server. I can log into it from my Ubuntu desktop, using a user and a password. I can only access SSH from my LAN, since the SSH port is not forwarded on my router. ...
20
votes
5answers
54k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...