Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [keys]

The tag has no usage guidance.

0
votes
1answer
15 views

OpenVPN Copy Server Certificate/Keys Onto Different Server

Let's say on Server 1 I setup all OpenVPN server credentials, certificate authority, etc... All these files have been generated on Server 1 using the following commands: ./easyrsa build-ca //create ...
0
votes
1answer
33 views

How to Use Azure Key Vault w/ Web App

I have an Azure Web App for a client project. The project also requires Azure SQL Databases and Blob Storage. All pieces mentioned are up and running but we've been told we can't have any password ...
1
vote
0answers
22 views

In OpenShift Origin, I need to generate keys and certificates in order to make my connection secure. Where do these keys come from?

In OpenShift Origin, I need to generate keys and certificates in order to make my connection secure. Where do these keys come from? These keys are in PEM format, and I really don't know where to find ...
2
votes
1answer
148 views

How do you set the session key size in OpenSSH?

In version 1 of the SSH protocol, it was possible to set the ephemeral session key size with the ServerKeyBits setting in sshd_config. Is there a way to do this for version 2 of the ssh protocol? In ...
0
votes
1answer
593 views

Edit x509v3 extended key usage in existing certificate-file

Is it possible to manually edit the key usage of a X509v3 certificate ? $ openssl x509 -in crt.crt -text ... X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 ...
0
votes
1answer
293 views

How can I host my public GPG key on S3?

I've been packaging some proprietary software that runs on Raspbian into .deb files and hosting them in a private S3 bucket using a program called deb-s3. I also use a program called apt-transport-s3 ...
1
vote
1answer
2k views

Where is cli.ini letsencrypt config file?

Where is the cli.ini file for default letsencrypt package? From Let's Encrypt docs, it's possible to set default rsa key length in a cli.ini file, however, I cannot find this file. I want to make ...
1
vote
0answers
983 views

How to tell Ansible to prompt user for passwd when SSH Key connection fails?

I work with a team of network engineers that are scared of linux, and I am trying to create a seamless user experience for my team. How do I create a condition that says: when key authentication ...
0
votes
1answer
508 views

Cut Off My Own Google Cloud Engine SSH Nose

A bit of stupidity. On my Google Compute Engine (GCE) instance, I went in and changed the sshd_config to listen another port (something I do routinely)...but I didn't test before logging off. And ...
0
votes
1answer
25 views

AWS Console- copy tag to tag

Two tags in AWS Console. Tag Key name: test1 and test2. All the tag information is in test1 key but need to go to test2 key. In filter I can type tag:all then edit that tag with a different key. ...
1
vote
1answer
2k views

request has invalid signature: TSIG rndc-test-key: tsig verify failure (BADKEY)

I am pretty much new to bind DNS and during nsupdate , i am getting BADKEY error.I have /root/named/chroot/etc/rndc.key as below :- key "rndc-test-...
0
votes
1answer
696 views

Extract a .pem file from an existing .ppk or from the server?

So I use windows and so when I first setup my server I had a pem key that I converted into a PPK using puttyGen. Now I no longer have the pem and need to access the server from a mac which uses .pem ...
1
vote
1answer
20 views

Remote Entry of PRE-BOOTDrive Encryption Key

I have a client with approximately 30 machines in a domain and each machine has Endpoint Encryption requiring a key to be entered at the machine keyboard each time the system is rebooted. These are ...
0
votes
1answer
2k views

When a client connects using an already-connected keys, it is the older client that is disconnected, rather than the newer being dissmissed

For administrative purposes some people from an administrative team share the same key to a server and it happens sometimes that one of them is already connected to the server when another is also ...
0
votes
0answers
179 views

Ubuntu 14.04 SSH from Third Party, No Error Cause

I have two instances of Ubuntu 14.04 running. I am utilizing a third party service that accesses the instance(s) via ssh using its own generated key pair, of which it provides me the public key. I ...
2
votes
0answers
350 views

EC2 SSH Login Temporarily Hangs on “Entering Interactive Session”

I've been researching this for hours now, can't figure out why this is happening. Originally marked it as internet but checked my speeds (37 down, 10 up). I went from California to Oregon, and since ...
1
vote
1answer
513 views

Google Cloud auth access key secret key?

Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
1
vote
1answer
2k views

Can I use kadmin (Linux) to add/remote SPNs from an Active Directory server?

Is it possible to use kadmin (Linux) to add/remote SPNs from an Active Directory server? I'm trying to add some service principles on my Active Directory server and store the keys in the local keytab ...
8
votes
3answers
32k views

How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?

We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
3
votes
1answer
1k views

Salt - What's the difference between Rejected and Denied?

So I have the salt master running on a server in my infrastructure and a few keys sitting there either accepted or unaccepted or... Either rejected or denied. My question is: What's the difference ...
2
votes
0answers
77 views

Recommendations for DNSSEC key metadata

In order to implement auto-dnssec maintain in the 9.7+ versions of BIND, one adds dates to the keys as metadata. After a lot of reading, I've come up with the following and hope that someone can ...
2
votes
1answer
3k views

DNSSEC sign-zone results in fatal failure

I have a working DNS in a VM-env for testing and learning purposes. It's a complete server from root-domain and a couple of subdomains. I've added dnssec-enable yes; into named.conf, and also ...
-2
votes
1answer
4k views

find or locate Windows Server 2008 R2 volume license key [closed]

Need help to find and locate Windows Server 2008 R2 volume license keys from the system registry, to document what keys are with which server. I have tried Magic Jelly Bean and Produkey, but both will ...
4
votes
2answers
4k views

Deleting a Key Pair for AWS EC2 Instance with EBS

I have an AWS EC2 Instance using EBS and I want to stop the use of the current private key, and use a new one. As I understand it, merely deleting the key pair on the AWS Console just deletes the ...
0
votes
1answer
2k views

Configuring Redhat / CentOS 5 SSH to authenticate to IPA server with public keys

I'm trying to configure some Red Hat/CentOS servers to use an ipa-server on CentOS 6 for SSH authentication with public keys. I'm storing the public keys on the IPA server, which works great on ...
-2
votes
1answer
572 views

Speedup of fixing an openssl bug with 8192 bit key [closed]

This is related to this Bug-Report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453 OpenSSL contains a set of arbitrary limitations on the size of accepted key parameters that ...
2
votes
1answer
45 views

Using puppet to manage ntpd certificates

My company is requiring me to implement signed time in ntpd with autokey. One of the requirements for autokey to work is to generate keys on each host. All the clients are part of the same group so ...
7
votes
2answers
24k views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
3
votes
1answer
149 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
9
votes
1answer
8k views

where does rpm install custom gpg keys?

Where does CentOS/RHEL 6 store custom gpg keys? I thought /etc/pki/rpm-gpg but I installed nginx's key but unable to find it. I see it was imported properly but where is it? wget http://nginx.org/...
0
votes
1answer
1k views

synology nas DS213 J rsync files from ubuntu 12.04 server

I´ve a Synology DS213 J Nas System. I´m trying to sync folders from a ubuntu 12.04 webserver to the nas without password prompt. therefore I logged into the nas via terminal with root account. ...
1
vote
1answer
3k views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...
6
votes
1answer
24k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
-1
votes
1answer
40 views

Getting error while running apt-get update

I am getting the following error while running apt-get update on all of the servers. W: A error occurred during the signature verification. The repository is not updated and the previous index files ...
1
vote
1answer
350 views

Forgot passphrase for new SSL certificate

I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits. I generated a key, CSR and got the certificate back from RapidSSL. Now, somehow, I've forgotten what Passphrase I used when ...
1
vote
2answers
401 views

SSH: How to know when an RSA key has been trusted?

my laptop apparently has changed its RSA key, so when I connect to it over SSH, I get the message of REMOTE HOST IDENTIFICATION HAS CHANGED. I don't remember if the last time I've connected to my ...
0
votes
1answer
75 views

Web service for checking out / leasing a token

I run a web site on AWS that has a number of web servers (say 4 of them) running behind a load balancer. For this particular web site, I have one license key of New Relic for doing instrumentation. ...
0
votes
3answers
2k views

No authorized_hosts file created

I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
0
votes
1answer
95 views

I have changed my server, Do I need to re generate the ssl key

I am using AWS for hosting. I have got one productions instance and pre-production instance in it. I have installed ssl to the production site. But unfortunately its crashed. So we cloned the pre-...
0
votes
2answers
643 views

HOw to make rsa key pairs work in CentOS 6

I am unable to make rsa key pair authentication work on my CentOS 6.2 vps. My understanding is that if rsa authentication is properly configured no password will be requested yet it is still required ...
2
votes
1answer
5k views

How can I use the home, end, page-up, page-down keys on Solaris via PuTTY?

I love the shortcuts home, end, page-up, page-down, but I am unable to use them via PuTTY on Solaris servers. Windows PuTTY => Linux desktop via SSH, works fine. Windows PuTTY => Solaris server,...
0
votes
0answers
204 views

Custom certificate/key pair does not work on OpenVPN clients

I have setup very basic OpenVPN network on Windows Server 2008. My clients are IP Cameras having Unix OS and built-in feature of openVPN connectivity. Initially I used a common client certificate/key ...
-2
votes
2answers
516 views

Windows key database for WDS [closed]

I wonder if there is any solution to have windows key database and use it in Windows Deployment process. If you know some or how please share
41
votes
8answers
12k views

What are best practices for managing SSH keys in a team?

I work with small teams (<10) of developers and admins with the following characteristics: Most members of the team have >1 personal computer, most of which are portable Team members have access ...
3
votes
2answers
4k views

[Shift]+[F1] not working in putty telnet sessions

Update: I configured putty (Windows 8; x64) to send exactly the same data as an old 16 bit Hyperterminal (Windows XP). I tested it using Wireshark. But still the Software on the Suse Server does not ...
0
votes
2answers
397 views

SSH:using single public key on multiple remote machines and spoofing-by-known-server

Lyrics Usually, people say, that using single public key on several servers is just as secure as using unique public keys on each of them. (If we're not talking about possibility of private key being ...
0
votes
3answers
5k views

OpenVPN server throws an “access denied” error

OpenVPN refuses to start up and exists with this error ever since i upgraded Ubuntu from 1.04 to 11.10 Dec 14 19:12:38 oogle ovpn-server[32150]: OpenVPN 2.2.0 i686-linux-gnu [SSL] [LZO2] [EPOLL] [...
1
vote
1answer
108 views

Multiple identical GPG Keys. What can cause that?

I'm using OpsCode Chef to manage all my VMs, but since the last week, I'm having issues with one VM. When running chef, it hangs right at the beginning. After a bit of investigation, I found out that ...
2
votes
2answers
161 views

breach in my machine [duplicate]

Possible Duplicate: My server’s been hacked EMERGENCY Suddenly, ssh claims that the key on my server is changed. Even freenx doesn't accept my connections no more because of the changed key. ...
5
votes
1answer
149 views

Finding Windows keys in use throughout corporation

We own a lot of Windows desktop keys (XP, Vista, and Windows 7) and have documented their usage and availability. Now the documentation has fallen behind and we don't know what keys are used where. Of ...