Questions tagged [keys]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
373 views

Why is this SSH handshake failing?

The server logs this 2021-12-07 21:57:29.889029102 Server listening on 0.0.0.0 port 2222. 2021-12-07 21:57:29.889033114 Server listening on :: port 2222. 2021-12-07 21:57:30.635958078 Connection ...
user avatar
1 vote
1 answer
3k views

Unable to install Windows Server 2022 Host Key on 2012R2 KMS Service

I have tried installing "Windows Srv 2022 DataCtr/Std KMS host key" on Windows Server 2012R2 KMS server, but apparently it is failing: The following error has occurred. Please resolve the ...
user avatar
0 votes
0 answers
112 views

Valid format of key for each type in ntp.keys file

I have few questions on ntp.keys file and need your help. From man page, the format of ntp keys is `keyno type key` where type can be md5, sha1, ripemd160, sha224, sha256 etc. I have confusion on ...
user avatar
  • 105
1 vote
1 answer
158 views

MS Failover Clustering Key - 4f692a7dc1b824e1f679f93fadd08a3b

4f692a7dc1b824e1f679f93fadd08a3b seems to be a common identifier for a RSA key associated with MS Failover clustering. It doesn't seem to be affiliated to the certificate ClusInfraCert, but rather ...
user avatar
0 votes
1 answer
29 views

How to add single nginx cache keys or file

How to add single nginx cache keys or file before client access link website. if link website quite more content example: html, image, video... several first access site very slow for cache server ...
user avatar
  • 1
1 vote
0 answers
204 views

Bind loading signed zone with outdated serial

I'm running BIND 9.16.3-Ubuntu (ISC PPA) on a primary DNS server with a split view setup of an internal and an external view. All zones are signed with inline signing and auto-dnssec maintain. Some ...
user avatar
  • 111
4 votes
2 answers
1k views

Can I create AWS Keys for each user that expire every 2 weeks?

My company uses AWS for compute, storage, databases and more. However, they use the root key for access to everything and I'm trying to move away from that for security purposes. Any leak could result ...
user avatar
  • 303
0 votes
1 answer
2k views

OpenVPN Copy Server Certificate/Keys Onto Different Server

Let's say on Server 1 I setup all OpenVPN server credentials, certificate authority, etc... All these files have been generated on Server 1 using the following commands: ./easyrsa build-ca //create ...
user avatar
0 votes
1 answer
1k views

How to Use Azure Key Vault w/ Web App

I have an Azure Web App for a client project. The project also requires Azure SQL Databases and Blob Storage. All pieces mentioned are up and running but we've been told we can't have any password ...
user avatar
  • 588
1 vote
1 answer
250 views

In OpenShift Origin, I need to generate keys and certificates in order to make my connection secure. Where do these keys come from?

In OpenShift Origin, I need to generate keys and certificates in order to make my connection secure. Where do these keys come from? These keys are in PEM format, and I really don't know where to find ...
user avatar
  • 11
3 votes
1 answer
1k views

How do you set the session key size in OpenSSH?

In version 1 of the SSH protocol, it was possible to set the ephemeral session key size with the ServerKeyBits setting in sshd_config. Is there a way to do this for version 2 of the ssh protocol? In ...
user avatar
0 votes
1 answer
2k views

Edit x509v3 extended key usage in existing certificate-file

Is it possible to manually edit the key usage of a X509v3 certificate ? $ openssl x509 -in crt.crt -text ... X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 ...
user avatar
0 votes
1 answer
687 views

How can I host my public GPG key on S3?

I've been packaging some proprietary software that runs on Raspbian into .deb files and hosting them in a private S3 bucket using a program called deb-s3. I also use a program called apt-transport-s3 ...
user avatar
  • 719
2 votes
1 answer
5k views

Where is cli.ini letsencrypt config file?

Where is the cli.ini file for default letsencrypt package? From Let's Encrypt docs, it's possible to set default rsa key length in a cli.ini file, however, I cannot find this file. I want to make ...
user avatar
  • 73
1 vote
0 answers
1k views

How to tell Ansible to prompt user for passwd when SSH Key connection fails?

I work with a team of network engineers that are scared of linux, and I am trying to create a seamless user experience for my team. How do I create a condition that says: when key authentication ...
user avatar
0 votes
1 answer
807 views

Cut Off My Own Google Cloud Engine SSH Nose

A bit of stupidity. On my Google Compute Engine (GCE) instance, I went in and changed the sshd_config to listen another port (something I do routinely)...but I didn't test before logging off. And ...
user avatar
  • 103
0 votes
1 answer
312 views

AWS Console- copy tag to tag

Two tags in AWS Console. Tag Key name: test1 and test2. All the tag information is in test1 key but need to go to test2 key. In filter I can type tag:all then edit that tag with a different key. ...
user avatar
3 votes
1 answer
4k views

request has invalid signature: TSIG rndc-test-key: tsig verify failure (BADKEY)

I am pretty much new to bind DNS and during nsupdate , i am getting BADKEY error.I have /root/named/chroot/etc/rndc.key as below :- key "rndc-test-...
user avatar
  • 131
0 votes
1 answer
1k views

Extract a .pem file from an existing .ppk or from the server?

So I use windows and so when I first setup my server I had a pem key that I converted into a PPK using puttyGen. Now I no longer have the pem and need to access the server from a mac which uses .pem ...
user avatar
  • 101
1 vote
1 answer
24 views

Remote Entry of PRE-BOOTDrive Encryption Key

I have a client with approximately 30 machines in a domain and each machine has Endpoint Encryption requiring a key to be entered at the machine keyboard each time the system is rebooted. These are ...
user avatar
0 votes
1 answer
3k views

When a client connects using an already-connected keys, it is the older client that is disconnected, rather than the newer being dissmissed

For administrative purposes some people from an administrative team share the same key to a server and it happens sometimes that one of them is already connected to the server when another is also ...
user avatar
  • 183
0 votes
0 answers
252 views

Ubuntu 14.04 SSH from Third Party, No Error Cause

I have two instances of Ubuntu 14.04 running. I am utilizing a third party service that accesses the instance(s) via ssh using its own generated key pair, of which it provides me the public key. I ...
user avatar
2 votes
0 answers
428 views

EC2 SSH Login Temporarily Hangs on "Entering Interactive Session"

I've been researching this for hours now, can't figure out why this is happening. Originally marked it as internet but checked my speeds (37 down, 10 up). I went from California to Oregon, and since ...
user avatar
1 vote
1 answer
972 views

Google Cloud auth access key secret key?

Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
user avatar
1 vote
1 answer
3k views

Can I use kadmin (Linux) to add/remote SPNs from an Active Directory server?

Is it possible to use kadmin (Linux) to add/remote SPNs from an Active Directory server? I'm trying to add some service principles on my Active Directory server and store the keys in the local keytab ...
user avatar
  • 389
12 votes
3 answers
41k views

How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?

We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
user avatar
4 votes
1 answer
1k views

Salt - What's the difference between Rejected and Denied?

So I have the salt master running on a server in my infrastructure and a few keys sitting there either accepted or unaccepted or... Either rejected or denied. My question is: What's the difference ...
user avatar
2 votes
0 answers
87 views

Recommendations for DNSSEC key metadata

In order to implement auto-dnssec maintain in the 9.7+ versions of BIND, one adds dates to the keys as metadata. After a lot of reading, I've come up with the following and hope that someone can ...
user avatar
  • 404
2 votes
1 answer
6k views

DNSSEC sign-zone results in fatal failure

I have a working DNS in a VM-env for testing and learning purposes. It's a complete server from root-domain and a couple of subdomains. I've added dnssec-enable yes; into named.conf, and also ...
user avatar
-2 votes
1 answer
5k views

find or locate Windows Server 2008 R2 volume license key [closed]

Need help to find and locate Windows Server 2008 R2 volume license keys from the system registry, to document what keys are with which server. I have tried Magic Jelly Bean and Produkey, but both will ...
user avatar
5 votes
2 answers
7k views

Deleting a Key Pair for AWS EC2 Instance with EBS

I have an AWS EC2 Instance using EBS and I want to stop the use of the current private key, and use a new one. As I understand it, merely deleting the key pair on the AWS Console just deletes the ...
user avatar
0 votes
1 answer
2k views

Configuring Redhat / CentOS 5 SSH to authenticate to IPA server with public keys

I'm trying to configure some Red Hat/CentOS servers to use an ipa-server on CentOS 6 for SSH authentication with public keys. I'm storing the public keys on the IPA server, which works great on ...
user avatar
-2 votes
1 answer
680 views

Speedup of fixing an openssl bug with 8192 bit key [closed]

This is related to this Bug-Report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453 OpenSSL contains a set of arbitrary limitations on the size of accepted key parameters that make unrelated ...
user avatar
  • 2,262
2 votes
1 answer
48 views

Using puppet to manage ntpd certificates

My company is requiring me to implement signed time in ntpd with autokey. One of the requirements for autokey to work is to generate keys on each host. All the clients are part of the same group so ...
user avatar
  • 447
10 votes
3 answers
33k views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
user avatar
  • 139
3 votes
1 answer
179 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
user avatar
10 votes
1 answer
11k views

where does RPM install custom GPG keys?

Where does CentOS/RHEL 6 store custom GPG keys? I thought /etc/pki/rpm-gpg but I installed nginx's key but unable to find it. I see it was imported properly but where is it? wget http://nginx.org/keys/...
user avatar
0 votes
1 answer
1k views

synology nas DS213 J rsync files from ubuntu 12.04 server

I´ve a Synology DS213 J Nas System. I´m trying to sync folders from a ubuntu 12.04 webserver to the nas without password prompt. therefore I logged into the nas via terminal with root account. ...
user avatar
  • 339
2 votes
1 answer
5k views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...
user avatar
7 votes
3 answers
37k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
user avatar
  • 71
-1 votes
1 answer
51 views

Getting error while running apt-get update

I am getting the following error while running apt-get update on all of the servers. W: A error occurred during the signature verification. The repository is not updated and the previous index files ...
user avatar
1 vote
1 answer
545 views

Forgot passphrase for new SSL certificate

I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits. I generated a key, CSR and got the certificate back from RapidSSL. Now, somehow, I've forgotten what Passphrase I used when ...
user avatar
  • 1,507
1 vote
2 answers
735 views

SSH: How to know when an RSA key has been trusted?

my laptop apparently has changed its RSA key, so when I connect to it over SSH, I get the message of REMOTE HOST IDENTIFICATION HAS CHANGED. I don't remember if the last time I've connected to my ...
user avatar
0 votes
1 answer
79 views

Web service for checking out / leasing a token

I run a web site on AWS that has a number of web servers (say 4 of them) running behind a load balancer. For this particular web site, I have one license key of New Relic for doing instrumentation. ...
user avatar
0 votes
3 answers
3k views

No authorized_hosts file created

I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
user avatar
0 votes
1 answer
114 views

I have changed my server, Do I need to re generate the ssl key

I am using AWS for hosting. I have got one productions instance and pre-production instance in it. I have installed ssl to the production site. But unfortunately its crashed. So we cloned the pre-...
user avatar
  • 111
0 votes
2 answers
722 views

HOw to make rsa key pairs work in CentOS 6

I am unable to make rsa key pair authentication work on my CentOS 6.2 vps. My understanding is that if rsa authentication is properly configured no password will be requested yet it is still required ...
user avatar
  • 131
2 votes
1 answer
6k views

How can I use the home, end, page-up, page-down keys on Solaris via PuTTY?

I love the shortcuts home, end, page-up, page-down, but I am unable to use them via PuTTY on Solaris servers. Windows PuTTY => Linux desktop via SSH, works fine. Windows PuTTY => Solaris server,...
user avatar
  • 3,933
0 votes
0 answers
217 views

Custom certificate/key pair does not work on OpenVPN clients

I have setup very basic OpenVPN network on Windows Server 2008. My clients are IP Cameras having Unix OS and built-in feature of openVPN connectivity. Initially I used a common client certificate/key ...
user avatar
-2 votes
2 answers
664 views

Windows key database for WDS [closed]

I wonder if there is any solution to have windows key database and use it in Windows Deployment process. If you know some or how please share
user avatar
  • 257