The tag has no wiki summary.

learn more… | top users | synonyms

178
votes
18answers
220k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
88
votes
6answers
27k views

SSH keypair generation: RSA or DSA?

SSH supports two signature algorithms for key pairs: RSA and DSA. Which is preferred, if any? For RSA, what is the minimum acceptable key length?
20
votes
2answers
6k views

Possible to change email address in keypair?

I've created an RSA keypair that I used for SSH, and it includes my email address. (At the end of the public key.) I've now changed my email address. Is it possible to change the email address on ...
19
votes
5answers
49k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
13
votes
4answers
4k views

Using PGP keys for SSH

I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
10
votes
2answers
12k views

How to check if a RSA public / private key pair matched

I have two files, id_rsa and id_rsa.pub, what command can be used to validate if they are the valid pair.
10
votes
3answers
12k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
8
votes
2answers
6k views

How do I validate a RSA ssh public key file (id_rsa.pub)?

Are there any command I can verify the public key (id_rsa.pub), just the format only Sometimes I have added a new linebreak, sometimes the file missed the ssh-rsa prefix, so are there any command to ...
8
votes
2answers
8k views

Postfix “warning: cannot get RSA private key from file”

I just followed this tutorial to set up a postfix mailserver with dovecot and mysql as backend for virtual users. Now I got the most parts working, I can connect to pop3 pop3s imap and imaps. Using ...
8
votes
4answers
11k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
7
votes
3answers
20k views

How to use openssh sftp command with a RSA/DSA key specified from the command line

The Openssh ssh and scp command provied an -i command line option to specify the path to the RSA/DSA key to be used for authentication. Looking at the sftp man pages I was not able to find a way to ...
6
votes
2answers
1k views

How To Organize and Use Multiple RSA Keys On Local Machine?

I have Server_A, Server_B, and Server_C. I want to generate unique authentication keys for each, and organize them on my local machine running Lion like so: Put server_A keys in ...
6
votes
1answer
5k views

RSA key, github keeps asking for my password

Okay folks, noob RSA question here. I have a production server, and I've generated an rsa key there. I've then taken the public key (id_rsa.pub) and given that to github, as a deploy key I believe. ...
5
votes
2answers
895 views

SSH keys: why is id_rsa larger than id_rsa.pub?

My private key (~/.ssh/id_rsa) is a 1766-byte file, but my public key (~/.ssh/id_rsa.pub) is only 396 bytes in length. Why the massive difference? Is it because the private key is encrypted using AES? ...
5
votes
2answers
352 views

When routers communicate with HTTPS, how is their identity confirmed?

There's something I don't understand. Possibly I have some misunderstanding about how HTTPS works. I heard that some wireless routers allow the user to access the administration page with HTTPS ...
4
votes
6answers
14k views

SSH login using public key failed

On localhost running sshd service. Created two pairs of rsa keys for root and user1 using ssh-keygen. Copied from root/.ssh/id_rsa.pub to user1/.ssh/id_rsa.pub. Changed permissions to 600. Tried ssh ...
4
votes
3answers
6k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
4
votes
3answers
2k views

OpenSSH : Key-based authorization, maximum key length

I'am using Putty on windows with key-based authentication to access some of mine servers. It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on ...
4
votes
2answers
3k views

Is disabling password login for SSH the same as deleting the password for all users?

I have a cloud server with only a root user. I SSH to it using RSA keys only. To make it more secure, I wanted to disable the password feature. I know that this can be done by editing the ...
4
votes
2answers
681 views

What is the best approach for RSA key management on Ubuntu?

We have 2 dozen servers and we are moving to RSA authentication. Of course, some developers, the IT, some Execs.. etc.. they all send their keys, who knows where they store them, who knows if they set ...
4
votes
1answer
685 views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
4
votes
4answers
3k views

The RSA key container could not be opened. Windows Server 2008 R2

I am setting up a second asp.net site on our Windows 2008 R2 server. We use a RSA Key Container to encrypt our connection strings. I created a new Application Pool with all the same settings as our ...
4
votes
1answer
1k views

What are the Jenkins/Hudson key files for?

After I have installed Jenkins (on Windows), the program folder contains, among others, two files: identity.key (28 lines) -----BEGIN RSA PRIVATE KEY----- MIIEow...... ... -----END RSA PRIVATE ...
4
votes
1answer
310 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
4
votes
0answers
631 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
3
votes
5answers
5k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
3
votes
2answers
288 views

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
3
votes
1answer
233 views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
3
votes
1answer
607 views

ssh: id_rsa doesn't work, but if I rename it, it works

I have this id_rsa in my ~/.ssh folder. But it just doesn't authenticate. If I copy it and rename it to anything not id_rsa, it works. [qfan@mycomputer .ssh]$ ls -al id_rsa id_rsa_good -rw------- 1 ...
3
votes
3answers
540 views

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / ...
3
votes
1answer
81 views

Is RSA's SecureID anyless secure in light of the attacks exploiting them?

Additionally, is two-factor authentication in general less secure, and if so, why?
3
votes
1answer
861 views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
3
votes
1answer
41 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
3
votes
1answer
222 views

Onscreen keyboard with RSA Authentication Agent on WIndows

I'm attempting to integrate a touch panel into our secured environment. As such, the touchpanel requires that the user login via RSA SecurID. Unfortunately, there is no exposed keyboard for the user ...
3
votes
2answers
1k views

Ubuntu 9.10 RSA authentication: ssh fails, filezilla runs fine

This is quite a mistery for me. I usually use passwordless RSA authentication to login into my remote *nix servers with ssh and sftp. Never had any problem until now. I cannot connect to an Ubuntu ...
2
votes
5answers
484 views

Are RSA keys needed for LAN only setups?

I have an SSH installed on my Ubuntu server. I can log into it from my Ubuntu desktop, using a user and a password. I can only access SSH from my LAN, since the SSH port is not forwarded on my router. ...
2
votes
4answers
5k views

SSH login without password

I know that you can use ssh-keygen to generate a public/private key pair. Then you can install the public key on a remote server. You can then login without supplying a password. I haven't been ...
2
votes
1answer
52 views

How can an RSA key be placed in a “non-folder”?

I lack a lot of knowledge regarding the subject so please excuse me if my question is very ignorant. I just started out with RSA key authentication to my test-server. It did not work at the beginning ...
2
votes
3answers
2k views

I created an RSA key but SSH keeps asking the password

On my Mac, I created an RSA key with ssh-keygen -t rsa and saved it as .ssh/authorized_keys on the target server (Ubuntu). I put this in server's /etc/ssh/sshd_config: PubkeyAuthentication yes ...
2
votes
2answers
189 views

openssh: public key failure for one user only

Client: opensuse 10.3, openssh 4.6 host: opensuse 11.3, openssh 5.4 I have a user that has ssh publickey setup to a host, to enable running some scripts through cron. We migrated the host to a new ...
2
votes
1answer
719 views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
2
votes
1answer
1k views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
2
votes
1answer
153 views

Auto accept rsa key fingerprint from command line

I've tried yes | ssh root@10.x.x.x to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
2
votes
1answer
223 views

Changing RSA passphrase on Windows with TortoiseGit auxiliary programs?

We have designers who are on PCs and are starting to use our git version control repositories. we are using rsa keys to allow them to connect, and TortoiseGit as the interface. Everything is working ...
2
votes
1answer
133 views

Correct use of RSA Key Pairs

I have recently began making use of RSA Key pairs to login to various servers I manage and wanted to get some insight on best practice as I recently ran into some issues. Is it best practice to keep ...
2
votes
1answer
133 views

Setting up RSA with multiple users

I've recently set up a server, and I've set up RSA authentication on said server. My question is, how do I set up RSA authentication for different users? As of right now, the only user that has RSA ...
2
votes
1answer
1k views

Can you make default client key length larger for ssh-keygen?

When users employ ssh-keygen to create RSA key pairs, the default key length is 2048 bits. You can override that on the command line with the -b argument, but few users will bother. As mentioned in ...
2
votes
1answer
3k views

Fallback authentication if mod_auth_kerb fails

Is there a way for Apache to fall back to a different authentication method if Kerberos authentication (for some reason) fails? The order of the authentication methods should be: Kerberos Active ...
2
votes
3answers
398 views

Anyone know if there's a way to report on “lost status” tokens in RSA?

I want to get a report of all users whose tokens are in "lost status" from RSA. Is this do-able?