The tag has no wiki summary.

learn more… | top users | synonyms

211
votes
19answers
277k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
90
votes
6answers
29k views

SSH keypair generation: RSA or DSA?

SSH supports two signature algorithms for key pairs: RSA and DSA. Which is preferred, if any? For RSA, what is the minimum acceptable key length?
26
votes
2answers
8k views

Possible to change email address in keypair?

I've created an RSA keypair that I used for SSH, and it includes my email address. (At the end of the public key.) I've now changed my email address. Is it possible to change the email address on ...
21
votes
6answers
58k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
13
votes
4answers
5k views

Using PGP keys for SSH

I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
12
votes
2answers
17k views

How to check if a RSA public / private key pair matched

I have two files, id_rsa and id_rsa.pub, what command can be used to validate if they are the valid pair.
10
votes
2answers
8k views

How do I validate a RSA ssh public key file (id_rsa.pub)?

Are there any command I can verify the public key (id_rsa.pub), just the format only Sometimes I have added a new linebreak, sometimes the file missed the ssh-rsa prefix, so are there any command to ...
10
votes
3answers
13k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
9
votes
3answers
28k views

How to use openssh sftp command with a RSA/DSA key specified from the command line

The Openssh ssh and scp command provied an -i command line option to specify the path to the RSA/DSA key to be used for authentication. Looking at the sftp man pages I was not able to find a way to ...
8
votes
4answers
12k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
6
votes
2answers
1k views

How To Organize and Use Multiple RSA Keys On Local Machine?

I have Server_A, Server_B, and Server_C. I want to generate unique authentication keys for each, and organize them on my local machine running Lion like so: Put server_A keys in ...
6
votes
1answer
6k views

RSA key, github keeps asking for my password

Okay folks, noob RSA question here. I have a production server, and I've generated an rsa key there. I've then taken the public key (id_rsa.pub) and given that to github, as a deploy key I believe. ...
5
votes
2answers
986 views

SSH keys: why is id_rsa larger than id_rsa.pub?

My private key (~/.ssh/id_rsa) is a 1766-byte file, but my public key (~/.ssh/id_rsa.pub) is only 396 bytes in length. Why the massive difference? Is it because the private key is encrypted using AES? ...
5
votes
6answers
17k views

SSH login using public key failed

On localhost running sshd service. Created two pairs of rsa keys for root and user1 using ssh-keygen. Copied from root/.ssh/id_rsa.pub to user1/.ssh/id_rsa.pub. Changed permissions to 600. Tried ssh ...
5
votes
4answers
2k views

OpenSSH : Key-based authorization, maximum key length

I'am using Putty on windows with key-based authentication to access some of mine servers. It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on ...
5
votes
1answer
1k views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
5
votes
2answers
356 views

When routers communicate with HTTPS, how is their identity confirmed?

There's something I don't understand. Possibly I have some misunderstanding about how HTTPS works. I heard that some wireless routers allow the user to access the administration page with HTTPS ...
5
votes
4answers
576 views

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / ...
4
votes
3answers
7k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
4
votes
2answers
4k views

Is disabling password login for SSH the same as deleting the password for all users?

I have a cloud server with only a root user. I SSH to it using RSA keys only. To make it more secure, I wanted to disable the password feature. I know that this can be done by editing the ...
4
votes
2answers
756 views

What is the best approach for RSA key management on Ubuntu?

We have 2 dozen servers and we are moving to RSA authentication. Of course, some developers, the IT, some Execs.. etc.. they all send their keys, who knows where they store them, who knows if they set ...
4
votes
1answer
426 views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
4
votes
4answers
4k views

The RSA key container could not be opened. Windows Server 2008 R2

I am setting up a second asp.net site on our Windows 2008 R2 server. We use a RSA Key Container to encrypt our connection strings. I created a new Application Pool with all the same settings as our ...
4
votes
3answers
3k views

I created an RSA key but SSH keeps asking the password

On my Mac, I created an RSA key with ssh-keygen -t rsa and saved it as .ssh/authorized_keys on the target server (Ubuntu). I put this in server's /etc/ssh/sshd_config: PubkeyAuthentication yes ...
4
votes
1answer
1k views

What are the Jenkins/Hudson key files for?

After I have installed Jenkins (on Windows), the program folder contains, among others, two files: identity.key (28 lines) -----BEGIN RSA PRIVATE KEY----- MIIEow...... ... -----END RSA PRIVATE ...
4
votes
1answer
358 views

Can apache use a key agent to store private keys for SSL?

For mod_ssl in apache to work, you need your RSA private key on the server. If the key is passphrase protected, you have to enter the passphrase whenever you restart apache. There is ...
4
votes
1answer
1k views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
3
votes
5answers
6k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
3
votes
2answers
299 views

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
3
votes
1answer
991 views

ssh: id_rsa doesn't work, but if I rename it, it works

I have this id_rsa in my ~/.ssh folder. But it just doesn't authenticate. If I copy it and rename it to anything not id_rsa, it works. [qfan@mycomputer .ssh]$ ls -al id_rsa id_rsa_good -rw------- 1 ...
3
votes
1answer
81 views

Is RSA's SecureID anyless secure in light of the attacks exploiting them?

Additionally, is two-factor authentication in general less secure, and if so, why?
3
votes
1answer
2k views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
3
votes
1answer
57 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
3
votes
1answer
233 views

Onscreen keyboard with RSA Authentication Agent on WIndows

I'm attempting to integrate a touch panel into our secured environment. As such, the touchpanel requires that the user login via RSA SecurID. Unfortunately, there is no exposed keyboard for the user ...
3
votes
2answers
1k views

Ubuntu 9.10 RSA authentication: ssh fails, filezilla runs fine

This is quite a mistery for me. I usually use passwordless RSA authentication to login into my remote *nix servers with ssh and sftp. Never had any problem until now. I cannot connect to an Ubuntu ...
2
votes
5answers
491 views

Are RSA keys needed for LAN only setups?

I have an SSH installed on my Ubuntu server. I can log into it from my Ubuntu desktop, using a user and a password. I can only access SSH from my LAN, since the SSH port is not forwarded on my router. ...
2
votes
5answers
9k views

SSH connection asks for password although key is accepted

I'm getting prompted for a password even though it looks like my SSH key is accepted. As far as I can tell, the line "Server accepts key: pkalg ssh-rsa blen 277" in the logs below mean my key is ...
2
votes
4answers
6k views

SSH login without password

I know that you can use ssh-keygen to generate a public/private key pair. Then you can install the public key on a remote server. You can then login without supplying a password. I haven't been ...
2
votes
1answer
53 views

How can an RSA key be placed in a “non-folder”?

I lack a lot of knowledge regarding the subject so please excuse me if my question is very ignorant. I just started out with RSA key authentication to my test-server. It did not work at the beginning ...
2
votes
1answer
602 views

Cannot decrypt private key eventhough I know pass-phrase

I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure... I am trying to use ...
2
votes
2answers
203 views

openssh: public key failure for one user only

Client: opensuse 10.3, openssh 4.6 host: opensuse 11.3, openssh 5.4 I have a user that has ssh publickey setup to a host, to enable running some scripts through cron. We migrated the host to a new ...
2
votes
2answers
5k views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
2
votes
1answer
2k views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
2
votes
1answer
1k views

Auto accept rsa key fingerprint from command line

I've tried yes | ssh root@10.x.x.x to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
2
votes
1answer
1k views

Exim DKIM Error: DKIM: signing failed (RC -101) no matter what private key I try

I have this problem with Exim. DKIM fails on signing outgoing mails. This is the /var/log/exim4/mainlog output (Debian Squeeze): 2012-08-02 17:11:33 1Sx1k5-0004Tk-9D <= me@my_domain.com U=me ...
2
votes
1answer
242 views

Changing RSA passphrase on Windows with TortoiseGit auxiliary programs?

We have designers who are on PCs and are starting to use our git version control repositories. we are using rsa keys to allow them to connect, and TortoiseGit as the interface. Everything is working ...
2
votes
1answer
142 views

Correct use of RSA Key Pairs

I have recently began making use of RSA Key pairs to login to various servers I manage and wanted to get some insight on best practice as I recently ran into some issues. Is it best practice to keep ...
2
votes
1answer
138 views

Setting up RSA with multiple users

I've recently set up a server, and I've set up RSA authentication on said server. My question is, how do I set up RSA authentication for different users? As of right now, the only user that has RSA ...
2
votes
1answer
1k views

Can you make default client key length larger for ssh-keygen?

When users employ ssh-keygen to create RSA key pairs, the default key length is 2048 bits. You can override that on the command line with the -b argument, but few users will bother. As mentioned in ...