Questions tagged [keys]
The keys tag has no usage guidance.
138
questions
1
vote
1
answer
58
views
"Target KMS key" error when trying to enable backup replication on an AWS RDS instance
I created an RDS database instance using the AWS user interface, and I made sure that the "Backup replication" feature was enabled and I specified the ARN for a symmetric multi-region KMS ...
- 249
1
vote
0
answers
2k
views
Why is this SSH handshake failing?
The server logs this
2021-12-07 21:57:29.889029102 Server listening on 0.0.0.0 port 2222.
2021-12-07 21:57:29.889033114 Server listening on :: port 2222.
2021-12-07 21:57:30.635958078 Connection ...
- 459
1
vote
1
answer
6k
views
Unable to install Windows Server 2022 Host Key on 2012R2 KMS Service
I have tried installing "Windows Srv 2022 DataCtr/Std KMS host key" on Windows Server 2012R2 KMS server, but apparently it is failing:
The following error has occurred. Please resolve the ...
- 51
1
vote
1
answer
253
views
MS Failover Clustering Key - 4f692a7dc1b824e1f679f93fadd08a3b
4f692a7dc1b824e1f679f93fadd08a3b seems to be a common identifier for a RSA key associated with MS Failover clustering. It doesn't seem to be affiliated to the certificate ClusInfraCert, but rather ...
- 11
0
votes
1
answer
122
views
How to add single nginx cache keys or file
How to add single nginx cache keys or file before client access link website. if link website quite more content example: html, image, video... several first access site very slow for cache server ...
- 1
1
vote
0
answers
291
views
Bind loading signed zone with outdated serial
I'm running BIND 9.16.3-Ubuntu (ISC PPA) on a primary DNS server with a split view setup of an internal and an external view. All zones are signed with inline signing and auto-dnssec maintain. Some ...
- 111
5
votes
2
answers
2k
views
Can I create AWS Keys for each user that expire every 2 weeks?
My company uses AWS for compute, storage, databases and more. However, they use the root key for access to everything and I'm trying to move away from that for security purposes. Any leak could result ...
- 353
0
votes
1
answer
2k
views
OpenVPN Copy Server Certificate/Keys Onto Different Server
Let's say on Server 1 I setup all OpenVPN server credentials, certificate authority, etc...
All these files have been generated on Server 1 using the following commands:
./easyrsa build-ca //create ...
- 57
0
votes
1
answer
1k
views
How to Use Azure Key Vault w/ Web App
I have an Azure Web App for a client project. The project also requires Azure SQL Databases and Blob Storage. All pieces mentioned are up and running but we've been told we can't have any password ...
- 678
1
vote
1
answer
267
views
In OpenShift Origin, I need to generate keys and certificates in order to make my connection secure. Where do these keys come from?
In OpenShift Origin, I need to generate keys and certificates in order to make my connection secure. Where do these keys come from?
These keys are in PEM format, and I really don't know where to find ...
- 11
3
votes
1
answer
1k
views
How do you set the session key size in OpenSSH?
In version 1 of the SSH protocol, it was possible to set the ephemeral session key size with the ServerKeyBits setting in sshd_config. Is there a way to do this for version 2 of the ssh protocol?
In ...
- 280
0
votes
1
answer
3k
views
Edit x509v3 extended key usage in existing certificate-file
Is it possible to manually edit the key usage of a X509v3 certificate ?
$ openssl x509 -in crt.crt -text
...
X509v3 Key Usage:
Digital Signature, Non Repudiation, Key Encipherment
X509v3 ...
- 131
0
votes
1
answer
816
views
How can I host my public GPG key on S3?
I've been packaging some proprietary software that runs on Raspbian into .deb files and hosting them in a private S3 bucket using a program called deb-s3. I also use a program called apt-transport-s3 ...
- 719
2
votes
1
answer
6k
views
Where is cli.ini letsencrypt config file?
Where is the cli.ini file for default letsencrypt package?
From Let's Encrypt docs, it's possible to set default rsa key length in a cli.ini file, however, I cannot find this file.
I want to make ...
- 73
1
vote
0
answers
2k
views
How to tell Ansible to prompt user for passwd when SSH Key connection fails?
I work with a team of network engineers that are scared of linux, and I am trying to create a seamless user experience for my team.
How do I create a condition that says: when key authentication ...
- 11
0
votes
1
answer
817
views
Cut Off My Own Google Cloud Engine SSH Nose
A bit of stupidity. On my Google Compute Engine (GCE) instance, I went in and changed the sshd_config to listen another port (something I do routinely)...but I didn't test before logging off. And ...
- 103
0
votes
1
answer
500
views
AWS Console- copy tag to tag
Two tags in AWS Console. Tag Key name: test1 and test2. All the tag information is in test1 key but need to go to test2 key. In filter I can type tag:all then edit that tag with a different key. ...
- 326
4
votes
1
answer
5k
views
request has invalid signature: TSIG rndc-test-key: tsig verify failure (BADKEY)
I am pretty much new to bind DNS and during nsupdate , i am getting BADKEY error.I have /root/named/chroot/etc/rndc.key as below :-
key "rndc-test-...
- 141
0
votes
1
answer
2k
views
Extract a .pem file from an existing .ppk or from the server?
So I use windows and so when I first setup my server I had a pem key that I converted into a PPK using puttyGen. Now I no longer have the pem and need to access the server from a mac which uses .pem ...
- 101
1
vote
1
answer
24
views
Remote Entry of PRE-BOOTDrive Encryption Key
I have a client with approximately 30 machines in a domain and each machine has Endpoint Encryption requiring a key to be entered at the machine keyboard each time the system is rebooted. These are ...
- 111
0
votes
1
answer
4k
views
When a client connects using an already-connected keys, it is the older client that is disconnected, rather than the newer being dissmissed
For administrative purposes some people from an administrative team share the same key to a server and it happens sometimes that one of them is already connected to the server when another is also ...
- 183
0
votes
0
answers
280
views
Ubuntu 14.04 SSH from Third Party, No Error Cause
I have two instances of Ubuntu 14.04 running. I am utilizing a third party service that accesses the instance(s) via ssh using its own generated key pair, of which it provides me the public key.
I ...
- 101
2
votes
0
answers
472
views
EC2 SSH Login Temporarily Hangs on "Entering Interactive Session"
I've been researching this for hours now, can't figure out why this is happening. Originally marked it as internet but checked my speeds (37 down, 10 up). I went from California to Oregon, and since ...
- 121
1
vote
1
answer
1k
views
Google Cloud auth access key secret key?
Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
- 11
1
vote
1
answer
3k
views
Can I use kadmin (Linux) to add/remote SPNs from an Active Directory server?
Is it possible to use kadmin (Linux) to add/remote SPNs from an Active Directory server?
I'm trying to add some service principles on my Active Directory server and store the keys in the local keytab ...
- 389
12
votes
3
answers
44k
views
How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?
We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
- 145
4
votes
1
answer
2k
views
Salt - What's the difference between Rejected and Denied?
So I have the salt master running on a server in my infrastructure and a few keys sitting there either accepted or unaccepted or... Either rejected or denied. My question is:
What's the difference ...
- 225
2
votes
0
answers
87
views
Recommendations for DNSSEC key metadata
In order to implement auto-dnssec maintain in the 9.7+ versions of BIND, one adds dates to the keys as metadata. After a lot of reading, I've come up with the following and hope that someone can ...
- 404
2
votes
1
answer
6k
views
DNSSEC sign-zone results in fatal failure
I have a working DNS in a VM-env for testing and learning purposes.
It's a complete server from root-domain and a couple of subdomains.
I've added
dnssec-enable yes;
into named.conf, and also ...
-2
votes
1
answer
5k
views
find or locate Windows Server 2008 R2 volume license key [closed]
Need help to find and locate Windows Server 2008 R2 volume license keys from the system registry, to document what keys are with which server. I have tried Magic Jelly Bean and Produkey, but both will ...
- 11
5
votes
2
answers
8k
views
Deleting a Key Pair for AWS EC2 Instance with EBS
I have an AWS EC2 Instance using EBS and I want to stop the use of the current private key, and use a new one. As I understand it, merely deleting the key pair on the AWS Console just deletes the ...
- 63
0
votes
1
answer
2k
views
Configuring Redhat / CentOS 5 SSH to authenticate to IPA server with public keys
I'm trying to configure some Red Hat/CentOS servers to use an ipa-server on CentOS 6 for SSH authentication with public keys. I'm storing the public keys on the IPA server, which works great on ...
- 357
-2
votes
1
answer
685
views
Speedup of fixing an openssl bug with 8192 bit key [closed]
This is related to this Bug-Report
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453
OpenSSL contains a set of arbitrary limitations on the size of
accepted key parameters that make unrelated ...
- 2,449
2
votes
1
answer
48
views
Using puppet to manage ntpd certificates
My company is requiring me to implement signed time in ntpd with autokey. One of the requirements for autokey to work is to generate keys on each host. All the clients are part of the same group so ...
- 477
11
votes
3
answers
35k
views
SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'
A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
- 149
3
votes
1
answer
181
views
Transfer SSH private and public keys after reinstall
I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system.
Too many servers already have my pub key and I do not want to change ...
- 33
10
votes
1
answer
13k
views
where does RPM install custom GPG keys?
Where does CentOS/RHEL 6 store custom GPG keys? I thought /etc/pki/rpm-gpg but I installed nginx's key but unable to find it. I see it was imported properly but where is it?
wget http://nginx.org/keys/...
- 131
0
votes
1
answer
1k
views
synology nas DS213 J rsync files from ubuntu 12.04 server
I´ve a Synology DS213 J Nas System. I´m trying to sync folders from a ubuntu 12.04 webserver to the nas without password prompt.
therefore I logged into the nas via terminal with root account.
...
- 349
2
votes
1
answer
6k
views
BIND session key
When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file.
Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key
...
- 931
7
votes
3
answers
40k
views
Trying to install SSL: Private key does not match certificate
I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
- 71
-1
votes
1
answer
79
views
Getting error while running apt-get update
I am getting the following error while running apt-get update on all of the servers.
W: A error occurred during the signature verification. The repository is not updated and the previous index files ...
- 2,628
1
vote
1
answer
587
views
Forgot passphrase for new SSL certificate
I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits.
I generated a key, CSR and got the certificate back from RapidSSL.
Now, somehow, I've forgotten what Passphrase I used when ...
- 1,627
1
vote
2
answers
782
views
SSH: How to know when an RSA key has been trusted?
my laptop apparently has changed its RSA key, so when I connect to it over SSH, I get the message of REMOTE HOST IDENTIFICATION HAS CHANGED.
I don't remember if the last time I've connected to my ...
- 11
0
votes
1
answer
79
views
Web service for checking out / leasing a token
I run a web site on AWS that has a number of web servers (say 4 of them) running behind a load balancer. For this particular web site, I have one license key of New Relic for doing instrumentation. ...
- 101
0
votes
3
answers
4k
views
No authorized_hosts file created
I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
- 3
0
votes
1
answer
117
views
I have changed my server, Do I need to re generate the ssl key
I am using AWS for hosting. I have got one productions instance and pre-production instance in it. I have installed ssl to the production site. But unfortunately its crashed. So we cloned the pre-...
- 111
0
votes
2
answers
788
views
HOw to make rsa key pairs work in CentOS 6
I am unable to make rsa key pair authentication work on my CentOS 6.2 vps. My understanding is that if rsa authentication is properly configured no password will be requested yet it is still required ...
- 131
2
votes
1
answer
7k
views
How can I use the home, end, page-up, page-down keys on Solaris via PuTTY?
I love the shortcuts home, end, page-up, page-down, but I am unable to use them via PuTTY on Solaris servers.
Windows PuTTY => Linux desktop via SSH, works fine.
Windows PuTTY => Solaris server,...
- 3,993
0
votes
0
answers
217
views
Custom certificate/key pair does not work on OpenVPN clients
I have setup very basic OpenVPN network on Windows Server 2008. My clients are IP Cameras having Unix OS and built-in feature of openVPN connectivity. Initially I used a common client certificate/key ...
- 155
-2
votes
2
answers
676
views
Windows key database for WDS [closed]
I wonder if there is any solution to have windows key database and use it in Windows Deployment process. If you know some or how please share
- 267