The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
6answers
5k views

sshd shuts down with “No supported key exchange algorithms” error

sshd $ /usr/sbin/sshd -f testconfig -p 22025 -d debug1: sshd version OpenSSH_5.2p1 debug1: private host key: #0 type 0 RSA1 debug1: read PEM private key done: type RSA debug1: private host key: #1 ...
4
votes
1answer
1k views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
1
vote
2answers
358 views

Accessing Citrix XenDesktop from outside the domain / firewall

My understanding of accessing a Citrix XenDesktop from a home PC is: Download the Citrix plugin. Go to the Citrix XenDesktop server in a web browser. Type in information, including PIN and number ...
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
21
votes
6answers
58k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
4
votes
3answers
7k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
-1
votes
3answers
2k views

SCP Asking for Password with RSA Key

I've followed a few tutorials on setting up RSA Public Key Authentication, but I cannot seem to get it to work. I can SSH into the remote machine without a password, but when I try and scp files, I ...
0
votes
1answer
127 views

How to convert DER formatted public key file to PEM form

I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key. The command I have used - openssl ...
0
votes
0answers
35 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
1
vote
1answer
72 views

Problems with SSH

I'm having issues with one of my computers on my server accepting my key. I've used this key on other computers I've set up before with no problems, I can SSH using it into many different servers. ...
1
vote
1answer
38 views

Apache 2.4.7 does not accept RSA ciphers but openssl does

# apachectl -version Server version: Apache/2.4.7 (Ubuntu) Server built: Jul 22 2014 14:36:38 I've got ssl.conf configured with the default SSLCipherSuite (SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5). ...
0
votes
2answers
3k views

DES warning message when connecting to Cisco ASA via SSH

I had to replace a Cisco ASA 5510 that died. I have everything back up and running however when I connect to the ASA via SSH (through Putty), I receive the following warning message: "The first ...
2
votes
2answers
4k views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
12
votes
2answers
17k views

How to check if a RSA public / private key pair matched

I have two files, id_rsa and id_rsa.pub, what command can be used to validate if they are the valid pair.
2
votes
1answer
572 views

Cannot decrypt private key eventhough I know pass-phrase

I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure... I am trying to use ...
5
votes
4answers
2k views

OpenSSH : Key-based authorization, maximum key length

I'am using Putty on windows with key-based authentication to access some of mine servers. It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on ...
2
votes
5answers
9k views

SSH connection asks for password although key is accepted

I'm getting prompted for a password even though it looks like my SSH key is accepted. As far as I can tell, the line "Server accepts key: pkalg ssh-rsa blen 277" in the logs below mean my key is ...
211
votes
19answers
275k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
0
votes
0answers
26 views

Generating an azure .pem file that has a passphrase?

So I've been trying to create a .pem file to securely access my server in Azure, but when I run this command in the terminal, which is from their help documents.. openssl req -x509 -nodes -days 365 ...
0
votes
1answer
296 views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
5
votes
4answers
576 views

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / ...
1
vote
2answers
3k views

Create a public private key pair for certificate in IIS

I need to create a public/private key pair for a certificate request. I would like to use IIS. Once the certificate is signed I will be distributing it to multiple servers and therefor will need the ...
0
votes
1answer
362 views

Why can't I enable SSHv2 on my Cisco 3750X?

It seemed simple enough: use ip ssh version 2. This was the result: 3750xCoreStack(config)#ip ssh version 2 Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2). ...
1
vote
3answers
3k views

ssh hostname returns “Bad owner or permissions on ~/.ssh/config” (chmod 600 not working with MingW)

This question is a near duplicate of Robert's question but after trying chmod 600 ~/.ssh/config I still have the same error. I've tried using cygwin and MINGW32 to do the chmod 600. ls -la returns ...
0
votes
1answer
31 views

Is my private key safe if I use authenticaiton agent forwarding with the ssh -A option?

I love the option to connect to servers via SSH with the -A option, so I can use my private keys on the server. This lets me update git/svn repositories and connect to other servers without the need ...
1
vote
3answers
1k views

OpenSSH server Authentication refused

I am running a Linux version 2.6.27-vpac2 on a PXA270 platform (armv5tel) I have a version of OpenSSH 3.8.1 p1 (Debian-8.sarge.4) trying to get to run on it. I have run the sshd in -ddd format to ...
1
vote
3answers
426 views

Why ssh uses .ssh/id_rsa as a pubkeyauthentication?

When trying to ssh -v 'somehost' Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Offering RSA public key: /home/kaldown/.ssh/id_rsa debug1: ...
0
votes
0answers
56 views

Multiple public RSA keys on server, sharing same SSH login details

At my company we use SSH to access a server in order to deploy projects through GIT. We share the same SSH login details to access the server. When I log in I always get prompted to enter the ...
13
votes
4answers
5k views

Using PGP keys for SSH

I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
-1
votes
2answers
92 views

Copy the rsa keys from one machine to another

Someone asked me to provide my public id_rsa key to make be able to connect to their server via ssh. I did so and it's working fine. I want to do that from my another laptop as well without having to ...
2
votes
1answer
1k views

Auto accept rsa key fingerprint from command line

I've tried yes | ssh root@10.x.x.x to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
0
votes
1answer
351 views

Server Remote Console Stopped working after reboot

I was working on IBM x3650 M4 Physical server running Red Hat 6.4 with HA LVM. I upgraded the kernel to latest version and reboot it. The server came up just fine and booted with latest kernel. Then ...
-7
votes
1answer
67 views

Is the ssh key name a part of the authentication? [closed]

The ssh public keys in authorized_hosts have three parts - a type, the key and a name. For example, an rsa key might look like: ssh-rsa ...
0
votes
1answer
585 views

centos 6.5 ssh rsa key fails

Alright I have read many many articles and followed a few different tutorials and I can not get my RSA key to work on my centos servers. The servers are running centos 6.5 with FreePBX on them and I ...
2
votes
0answers
1k views

Authentication Microsoft AD Users with RSA SecurID

I have an integration problem between RSA SecurID and Microsoft AD described in the picture below: 1.The user needs to connect to private network via VPN and authenticates to the Firewall via its ...
0
votes
1answer
162 views

Ubuntu 14.04 asking for pass phrase to unlock RSA key oddity.

Sorry for the obscure title but I have no idea how to phrase this.. I am having an oddity occurring with my RSA key, I use RSA key authentication over SSH for all my servers and other services where ...
-1
votes
2answers
217 views

Putting My RSA Public Key on RSA Key-Secured Server

Hello and thanks for reading, Basically, I'm taking over for someone on some system admin duties, learning as I go, but one problem I've run into is not having my public RSA key put onto a particular ...
3
votes
2answers
299 views

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
5
votes
1answer
1k views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
-1
votes
3answers
137 views

What will be the ill effects of turning off and on server daily

I have IBM server x 3850 M2 with remote system adapter. It has 128GB RAM and 4 SAS drives Its basically for my home labs , developmenet and testing I think that if i make it on 24 x 7 then i will ...
1
vote
1answer
34 views

Is there any methods to accelerate RSA?

We can use Intel's AESNI to accelerate AES encoding/decoding. But in a SSL session, before AES we have to use RSA to exchange keys; are there any methods to accelerate RSA also?
-2
votes
1answer
2k views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
1
vote
2answers
191 views

ssh rsa or dsa connection fail [closed]

I explain steps for make rsa key. create rsa key [user@host01 .ssh]$ ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (/home/user/.ssh/id_rsa): Enter ...
3
votes
1answer
2k views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
4
votes
1answer
422 views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
1
vote
1answer
198 views

Bash script for updating multiple servers not accepting RSA keys

In my environment I manage about 10 Linux servers that require regular package updates. I have a script written to connect to each individually and run the update. Additionally, I have RSA keys ...
3
votes
1answer
55 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
1
vote
1answer
805 views

Access CentOS 5 server over SSH with RSA public/private key from OSX

I'm trying to configure SSH access to my CentOS server using an RSA key rather than with a password but it refuses to accept the key. Here's what I've done so far: On client machine (OSX): ...
0
votes
0answers
170 views

How to integrate RSA with AS DS?

I have not been able to find anything online that isn't AD FS. Since I do not run AD FS, is there a way to integrate RSA Securid with just AD DS? Any online resources? Also, this is a 2012 server.
2
votes
1answer
2k views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...