The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
3 views

Read-Only Access to RSA Radius Server 6.1

I'd like to give a user read-only access to a RSA Radius 6.1 Server DB so that they can run batch data jobs. I don't see a way to do this through the Authentication Manager or on the Radius Server ...
0
votes
1answer
1k views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
0
votes
3answers
164 views

Passwordless root SSH on CentOS 6 with public key

I am trying to create a "passwordless" setup so that the remote server is more secure without password + I can automate the login process. I have created a new ssh key with ssh-keygen, and copied the ...
5
votes
7answers
17k views

SSH connection asks for password although key is accepted

I'm getting prompted for a password even though it looks like my SSH key is accepted. As far as I can tell, the line "Server accepts key: pkalg ssh-rsa blen 277" in the logs below mean my key is ...
3
votes
1answer
8k views

Cannot decrypt private key eventhough I know passphrase

I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure. I am trying to use standard ...
0
votes
1answer
33 views

SFTP key issue? java.security.InvalidAlgorithmParameterException

I'm attempting to use my applications SFTP client test connection to connect to the MF but I'm getting the error: Test of SFTP user alias GLDFundingEngine_User failed. Details: Session.connect: ...
-3
votes
1answer
32 views

How to export private key? (GnuPG) [closed]

I have successfully created GnuPG public/private key pair using RSA and RSA algorithm. But I can't figure out a way to export public key and private key in the form of file with .asc extension. I am ...
0
votes
0answers
40 views

How to configure RSA Archer for Single Sign-On (reverse proxy)

Trying to setup RSA archer to run behind a reverse proxy and accept an HTTP header as an authenticated user. Most applications will accept REMOTE_USER or some arbitrary header and process that user ...
305
votes
23answers
441k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
5
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
0
votes
1answer
74 views

Access with ssh only password without publickey with virtualbox

I tried to setup the ssh-server without publickey , with openssh-server 6.7p1-5 changed sshd_config RSAAuthentication no PubkeyAuthentication no PasswordAuthentication yes Restart ssh service ...
1
vote
1answer
32 views

How EJBCA generate private key

I'm looking for the method used by EJBCA to generate the private keys in general (CA, Sub-Ca, certificates...). Let say for instance you want RSA 2048 key size. Is the generation process all done in ...
-1
votes
1answer
54 views

Apache httpd won't start

I'm unable to start apache on El Capitan. Output of apachectl restart is: [Mon Apr 18 19:47:32 2016] [warn] NameVirtualHost *:8443 has no VirtualHosts [Mon Apr 18 19:47:32 2016] [warn] ...
1
vote
2answers
1k views

Why does Keychain compain that id_rsa.pub is missing?

I'm reading this article on setting up unattended backups in Duplicity. I'm in the part called 7.2. SSH KeyCaching I've added the following to my root .bash_profile keychain --clear id_rsa . /root/...
20
votes
3answers
37k views

How to check if a RSA public / private key pair matched

I have two files, id_rsa and id_rsa.pub, what command can be used to validate if they are the valid pair.
0
votes
0answers
21 views

CSR created for unrequested domains

Trying to create csr for domain.com only. Key first: # openssl genrsa -out domain.com.key 2048 Generating RSA private key, 2048 bit long modulus .........................................................
7
votes
2answers
76 views

Same RSA key on multiple PCs

Can I use my RSA private key on multiple computers i.e. my desktop and laptop. Or do I have to create a unique key for each computer I own, and add their respective public keys to necessary servers/...
1
vote
1answer
58 views

Why won't my SSH keys forward properly?

I'm trying to ssh from my machine to another machine and from there to a third machine. When I do it manually, it works like this: localhost$ scp ~/.ssh/id_rsa myuser@myhost.something.something.com:. ...
12
votes
3answers
15k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
-2
votes
1answer
58 views

ssh - Why isn't it trying my private key? [closed]

I'm trying to connect to a remote SSH server using a private key at ~/.ssh/id_rsa. When I ssh -v to the server I get the following: ... debug1: Authentications that can continue: publickey debug1: ...
30
votes
6answers
82k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
2
votes
1answer
50 views

Keeping track of SSH private keys without comments

SSH public keys support comments (which simply consist of text appended to the end of the key), which makes it easy to identify an otherwise unidentifiable id_rsa.pub file. You can use the comment to ...
1
vote
2answers
2k views

Optimizing HAProxy SSL Termination (with Nginx backend on Ubuntu)

How can I optimize HAProxy with SSL Termination to Nginx backends on Ubuntu? The setup works fine and routes properly. However, when I perform SSL Termination with HAProxy, theres a huge performance ...
0
votes
1answer
38 views

Forcing SSH login on Ubuntu 14.04 server not working

I've tried enabling SSH logins in my linux server. It can establish connection just fine trough my private key. I also went to /etc/ssh/ssh_config and edited the following field like this: ...
2
votes
1answer
215 views

How to use DSA key pairs instead of RSA

For testing purposes, I would like to enable DSA authentication on my server (let's name it A). If I remove all the key pairs located under /etc/ssh, both RSA and DSA key pairs are generated on sshd ...
0
votes
1answer
28 views

Setting Host Fingerprint on New EC2 Instances

TL;DR Can I tell AWS EC2 to launch an instance from AMI but keep the host keys -- the ones in /etc/ssh that were saved with the AMI -- instead of generating new keys and overwriting the ones saved ...
0
votes
2answers
2k views

Why can't I enable SSHv2 on my Cisco 3750X?

It seemed simple enough: use ip ssh version 2. This was the result: 3750xCoreStack(config)#ip ssh version 2 Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2). ...
1
vote
1answer
20 views

No password login via RSA, but not SSH, using HTTPS?

I've successfully implemented no password login via RSA key exchange to SSH on Linux many times. What I'm hoping to do is achieve a similar authentication for my HTTPS RESTful web services, but I don'...
1
vote
0answers
203 views

Remote Desktop + Two Factor

My boss has asked me to come up with a way to implement dual factor authentication for RDP access to servers. So, when any of my fellow admins remotely log into a server via RDP they must go through ...
2
votes
1answer
672 views

OpenVPN ssl VERIFY ERROR: depth=0, error=certificate signature failure in TI am335x-evm platform

I try to porting the openVPN client (2.3.8) to ARMS embedded device. After setting cross compile I was able to run in ARMS, somehow, when I lanuch the openvpn in ARMS, it show error : VERIFY ERROR: ...
4
votes
4answers
7k views

The RSA key container could not be opened. Windows Server 2008 R2

I am setting up a second asp.net site on our Windows 2008 R2 server. We use a RSA Key Container to encrypt our connection strings. I created a new Application Pool with all the same settings as our ...
0
votes
1answer
8k views

RSA Authentication Manager - Unable to resolve principal by login ID and/or alias

I'm attempting to setup a RSA authentication manager with a Microsoft Active Directory as the identity source. When I try to login from the Windows login client the login attempt failed and I recieve ...
0
votes
0answers
86 views

Cannot enable SSHv2 on my Cisco 3560

I searched google for an answer to why I can't enter this command, but I'm stumped. Please help! Cisco 3560 48p PoE 12.2(53)SE2 (config)#ip ssh version 2 Please create RSA keys to enable SSH (of ...
2
votes
1answer
317 views

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem ...
3
votes
4answers
3k views

OpenSSH server Authentication refused

I am running a Linux version 2.6.27-vpac2 on a PXA270 platform (armv5tel) I have a version of OpenSSH 3.8.1 p1 (Debian-8.sarge.4) trying to get to run on it. I have run the sshd in -ddd format to ...
11
votes
3answers
53k views

How to use openssh sftp command with a RSA/DSA key specified from the command line

The Openssh ssh and scp command provied an -i command line option to specify the path to the RSA/DSA key to be used for authentication. Looking at the sftp man pages I was not able to find a way to ...
0
votes
1answer
569 views

Generating a CSR fails with 'routines:RSA_sign:digest too big for rsa' - for heroku

I tried generating a CSR by following Heroku instructions. Specifically openssl genrsa -des3 -out server.pass.key 2048 openssl rsa -in server.pass.key -out server.key openssl req -nodes -new -key ...
4
votes
6answers
11k views

sshd shuts down with “No supported key exchange algorithms” error

sshd $ /usr/sbin/sshd -f testconfig -p 22025 -d debug1: sshd version OpenSSH_5.2p1 debug1: private host key: #0 type 0 RSA1 debug1: read PEM private key done: type RSA debug1: private host key: #1 ...
1
vote
2answers
521 views

Accessing Citrix XenDesktop from outside the domain / firewall

My understanding of accessing a Citrix XenDesktop from a home PC is: Download the Citrix plugin. Go to the Citrix XenDesktop server in a web browser. Type in information, including PIN and number ...
9
votes
3answers
11k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
-1
votes
3answers
2k views

SCP Asking for Password with RSA Key

I've followed a few tutorials on setting up RSA Public Key Authentication, but I cannot seem to get it to work. I can SSH into the remote machine without a password, but when I try and scp files, I ...
0
votes
1answer
2k views

How to convert DER formatted public key file to PEM form

I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key. The command I have used - openssl ...
0
votes
0answers
153 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
1
vote
1answer
91 views

Problems with SSH

I'm having issues with one of my computers on my server accepting my key. I've used this key on other computers I've set up before with no problems, I can SSH using it into many different servers. ...
1
vote
1answer
94 views

Apache 2.4.7 does not accept RSA ciphers but openssl does

# apachectl -version Server version: Apache/2.4.7 (Ubuntu) Server built: Jul 22 2014 14:36:38 I've got ssl.conf configured with the default SSLCipherSuite (SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5). ...
0
votes
2answers
3k views

DES warning message when connecting to Cisco ASA via SSH

I had to replace a Cisco ASA 5510 that died. I have everything back up and running however when I connect to the ASA via SSH (through Putty), I receive the following warning message: "The first ...
2
votes
2answers
19k views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
8
votes
4answers
4k views

OpenSSH : Key-based authorization, maximum key length

I'am using Putty on windows with key-based authentication to access some of mine servers. It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on client-...
5
votes
4answers
653 views

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / ...
2
votes
2answers
8k views

Create a public private key pair for certificate in IIS

I need to create a public/private key pair for a certificate request. I would like to use IIS. Once the certificate is signed I will be distributing it to multiple servers and therefor will need the ...