The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
22 views

Apache 2.4.7 does not accept RSA ciphers but openssl does

# apachectl -version Server version: Apache/2.4.7 (Ubuntu) Server built: Jul 22 2014 14:36:38 I've got ssl.conf configured with the default SSLCipherSuite (SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5). ...
0
votes
2answers
3k views

DES warning message when connecting to Cisco ASA via SSH

I had to replace a Cisco ASA 5510 that died. I have everything back up and running however when I connect to the ASA via SSH (through Putty), I receive the following warning message: "The first ...
2
votes
2answers
3k views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
10
votes
2answers
15k views

How to check if a RSA public / private key pair matched

I have two files, id_rsa and id_rsa.pub, what command can be used to validate if they are the valid pair.
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
8
votes
2answers
9k views

Postfix “warning: cannot get RSA private key from file”

I just followed this tutorial to set up a postfix mailserver with dovecot and mysql as backend for virtual users. Now I got the most parts working, I can connect to pop3 pop3s imap and imaps. Using ...
20
votes
5answers
54k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
2
votes
1answer
138 views

Cannot decrypt private key eventhough I know pass-phrase

I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure... I am trying to use ...
4
votes
4answers
2k views

OpenSSH : Key-based authorization, maximum key length

I'am using Putty on windows with key-based authentication to access some of mine servers. It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on ...
1
vote
5answers
8k views

SSH connection asks for password although key is accepted

I'm getting prompted for a password even though it looks like my SSH key is accepted. As far as I can tell, the line "Server accepts key: pkalg ssh-rsa blen 277" in the logs below mean my key is ...
202
votes
19answers
254k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
0
votes
0answers
15 views

Generating an azure .pem file that has a passphrase?

So I've been trying to create a .pem file to securely access my server in Azure, but when I run this command in the terminal, which is from their help documents.. openssl req -x509 -nodes -days 365 ...
0
votes
1answer
71 views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
5
votes
4answers
568 views

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / ...
1
vote
2answers
2k views

Create a public private key pair for certificate in IIS

I need to create a public/private key pair for a certificate request. I would like to use IIS. Once the certificate is signed I will be distributing it to multiple servers and therefor will need the ...
0
votes
1answer
154 views

Why can't I enable SSHv2 on my Cisco 3750X?

It seemed simple enough: use ip ssh version 2. This was the result: 3750xCoreStack(config)#ip ssh version 2 Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2). ...
1
vote
3answers
3k views

ssh hostname returns “Bad owner or permissions on ~/.ssh/config” (chmod 600 not working with MingW)

This question is a near duplicate of Robert's question but after trying chmod 600 ~/.ssh/config I still have the same error. I've tried using cygwin and MINGW32 to do the chmod 600. ls -la returns ...
0
votes
1answer
27 views

Is my private key safe if I use authenticaiton agent forwarding with the ssh -A option?

I love the option to connect to servers via SSH with the -A option, so I can use my private keys on the server. This lets me update git/svn repositories and connect to other servers without the need ...
1
vote
3answers
679 views

OpenSSH server Authentication refused

I am running a Linux version 2.6.27-vpac2 on a PXA270 platform (armv5tel) I have a version of OpenSSH 3.8.1 p1 (Debian-8.sarge.4) trying to get to run on it. I have run the sshd in -ddd format to ...
0
votes
3answers
273 views

Why ssh uses .ssh/id_rsa as a pubkeyauthentication?

When trying to ssh -v 'somehost' Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Offering RSA public key: /home/kaldown/.ssh/id_rsa debug1: ...
0
votes
0answers
46 views

Multiple public RSA keys on server, sharing same SSH login details

At my company we use SSH to access a server in order to deploy projects through GIT. We share the same SSH login details to access the server. When I log in I always get prompted to enter the ...
13
votes
4answers
5k views

Using PGP keys for SSH

I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
-1
votes
2answers
81 views

Copy the rsa keys from one machine to another

Someone asked me to provide my public id_rsa key to make be able to connect to their server via ssh. I did so and it's working fine. I want to do that from my another laptop as well without having to ...
4
votes
3answers
7k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
2
votes
1answer
662 views

Auto accept rsa key fingerprint from command line

I've tried yes | ssh root@10.x.x.x to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
0
votes
1answer
265 views

Server Remote Console Stopped working after reboot

I was working on IBM x3650 M4 Physical server running Red Hat 6.4 with HA LVM. I upgraded the kernel to latest version and reboot it. The server came up just fine and booted with latest kernel. Then ...
-7
votes
1answer
61 views

Is the ssh key name a part of the authentication? [closed]

The ssh public keys in authorized_hosts have three parts - a type, the key and a name. For example, an rsa key might look like: ssh-rsa ...
0
votes
1answer
533 views

centos 6.5 ssh rsa key fails

Alright I have read many many articles and followed a few different tutorials and I can not get my RSA key to work on my centos servers. The servers are running centos 6.5 with FreePBX on them and I ...
2
votes
0answers
927 views

Authentication Microsoft AD Users with RSA SecurID

I have an integration problem between RSA SecurID and Microsoft AD described in the picture below: 1.The user needs to connect to private network via VPN and authenticates to the Firewall via its ...
0
votes
1answer
154 views

Ubuntu 14.04 asking for pass phrase to unlock RSA key oddity.

Sorry for the obscure title but I have no idea how to phrase this.. I am having an oddity occurring with my RSA key, I use RSA key authentication over SSH for all my servers and other services where ...
-1
votes
2answers
181 views

Putting My RSA Public Key on RSA Key-Secured Server

Hello and thanks for reading, Basically, I'm taking over for someone on some system admin duties, learning as I go, but one problem I've run into is not having my public RSA key put onto a particular ...
3
votes
2answers
293 views

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
4
votes
1answer
903 views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
-1
votes
3answers
124 views

What will be the ill effects of turning off and on server daily

I have IBM server x 3850 M2 with remote system adapter. It has 128GB RAM and 4 SAS drives Its basically for my home labs , developmenet and testing I think that if i make it on 24 x 7 then i will ...
1
vote
1answer
32 views

Is there any methods to accelerate RSA?

We can use Intel's AESNI to accelerate AES encoding/decoding. But in a SSL session, before AES we have to use RSA to exchange keys; are there any methods to accelerate RSA also?
-2
votes
1answer
1k views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
1
vote
2answers
177 views

ssh rsa or dsa connection fail [closed]

I explain steps for make rsa key. create rsa key [user@host01 .ssh]$ ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (/home/user/.ssh/id_rsa): Enter ...
3
votes
1answer
1k views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
3
votes
1answer
348 views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
1
vote
1answer
182 views

Bash script for updating multiple servers not accepting RSA keys

In my environment I manage about 10 Linux servers that require regular package updates. I have a script written to connect to each individually and run the update. Additionally, I have RSA keys ...
3
votes
1answer
46 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
4
votes
0answers
850 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
1
vote
1answer
797 views

Access CentOS 5 server over SSH with RSA public/private key from OSX

I'm trying to configure SSH access to my CentOS server using an RSA key rather than with a password but it refuses to accept the key. Here's what I've done so far: On client machine (OSX): ...
0
votes
0answers
150 views

How to integrate RSA with AS DS?

I have not been able to find anything online that isn't AD FS. Since I do not run AD FS, is there a way to integrate RSA Securid with just AD DS? Any online resources? Also, this is a 2012 server.
2
votes
1answer
2k views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
-2
votes
1answer
2k views

Impossible to connect ssh /root/.ssh/known_hosts': No such file or directory

I can't connect to my server with ssh. I have already started a session with ssh but i know if i quit this session, i won't be able to connect again to my server. ssh root@genese.com ...
10
votes
3answers
12k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
3
votes
1answer
838 views

ssh: id_rsa doesn't work, but if I rename it, it works

I have this id_rsa in my ~/.ssh folder. But it just doesn't authenticate. If I copy it and rename it to anything not id_rsa, it works. [qfan@mycomputer .ssh]$ ls -al id_rsa id_rsa_good -rw------- 1 ...
1
vote
1answer
1k views

IBM Remote Supervisor Adapters(RSA ii) boot ISO

My company recently bought some add in IBM Remote Supervisor Adapters for our older x3550 servers. We got them installed and working, and left for the weekend. The idea was to get them to mount and ...
4
votes
2answers
4k views

Is disabling password login for SSH the same as deleting the password for all users?

I have a cloud server with only a root user. I SSH to it using RSA keys only. To make it more secure, I wanted to disable the password feature. I know that this can be done by editing the ...