2022 Developer Survey is open! Take survey.

Questions tagged [private-key]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
2 answers
49 views

Decrypt a pcks8 private key file on windows?

Is there any way on standard Windows Server (such as with certutil?) to decrypted a pkcs8 pem encrypted private key? i.e. What is the equivalent on windows of: openssl pkcs8 -in key.enc -out key.pem ...
user avatar
  • 101
1 vote
0 answers
32 views

github not accepting private SSH Key

I have a Private ED25519 SSH key, on a Windows system (using WSL). Permissions of the private key are 400 and permissions on the Public Key are 444. When I test my connection, using ssh -Tvvv git@...
user avatar
0 votes
0 answers
91 views

Private key is not generating from .p12 file

I generated my .p12 file using the below command keytool -importkeystore -srckeystore mycert.jks -destkeystore keystore.p12 -deststoretype PKCS12 The above command successfully generated a 7 KB .p12 ...
user avatar
-2 votes
1 answer
27 views

Management of password disable server

This question is just for curiosity. I am studying a bit of server administration and have seen many people saying that having passwords is a bad idea and they should be disabled. But my question is: ...
user avatar
0 votes
1 answer
153 views

Create new SubCA certificate fails with NTE_PROV_TYPE_NOT_DEF

I am trying to manually create a key and CSR for a new Windows AD CS Enterprise Subordinate CA (Windows Server 2019). I'd like to store the key in the modern Microsoft Software Key Storage Provider. ...
user avatar
  • 6,663
0 votes
1 answer
708 views

No associated key pair, add key pair to EC2 with no key pair

How do you add an existing key to a live EC2 instance that has no key pair? I have tried using Session Manager to vi /.ssh/authorized_keys and add in the public key of the pair, but I get this error: &...
user avatar
  • 509
0 votes
0 answers
213 views

Reach TimescaleDB with Hasura API: "CA certificate and CA private key do not match" when using self-signed server certificate / private key

I follow the guide at timescaleDB for APIs with Certificate authentication --> 2. Generate keys and certificates for nodes: For an SSL connection, you need four environment variables: SSL Root ...
user avatar
2 votes
1 answer
351 views

AWS - ssh to instance in private subnet

I have 2 instances in AWS. One of them in a public subnet (bastion), the second one in a private subnet. Both of them were launched with the same key pair (.pem file). This is how I connect to the ...
user avatar
0 votes
2 answers
82 views

Encrypted files stored next to GPG Key in backup – alternative solution?

During a recent test run to see if my personal backups work as intended, I noticed that I store my GPG key next to files encrypted with that key on the same disk. Although the disk is encrypted (LUKS) ...
user avatar
  • 151
1 vote
1 answer
38 views

How to connect from Ubuntu VM on Azure to another without uploading the private key

My Topology Two Ubuntu servers, the edge which is exposed to the internet, and the core which is only connected locally. Both are on the same subnet and the core only accepts SSH from the edge server. ...
user avatar
0 votes
2 answers
56 views

Public/private key

I just watch this video https://youtu.be/ZhMw53Ud2tY and the question I have is if I have to generate a public/private key pair for each server I’m looking to login to or if I just generate one pair ...
user avatar
  • 111
0 votes
1 answer
205 views

Apache SSL certificate and Private key

we've a server apache and the certificate is expired. We have an SSL Wildcard certificate issued by Sectigo. I generated the new certificate on our reseller site and we're going to upload it in the ...
user avatar
  • 1
2 votes
1 answer
2k views

Powershell self-signed certifcate private key not exportable

Using Powershell, I'm attempting to create a self-signed ssl certificate with a private key that can be exported. I've read and followed various tutorials, however the end result is always that no ...
user avatar
1 vote
3 answers
667 views

SSH from A through B to C, using IdentityFile on A

I've see some similar questions but without a clear way forward, if this was already answered before please close this one. My scenario is: Host C is not accessible from A. Host B is accessible from ...
user avatar
0 votes
1 answer
228 views

Private ssh key not working in some devices. "Error: permission denied (publickey)."

I have a virtual server. Recently, I disabled PasswordAuthentication to make it more secure. I had already created a key pair using Puttygen in Windows. I converted the private key (.ppk) using putty-...
user avatar
3 votes
0 answers
1k views

How do I fix 'Missing stored keyset' through a remote powershell session (without also being RDP'ed in)

I'm trying to script the installation of our on-premise CI/CD agent. Part of that is installing some certificates Powershell Import-Certificate -FilePath self_signed_CA.cer -CertStoreLocation cert:\...
user avatar
  • 171
1 vote
1 answer
129 views

Distribute Secrets via Active Directory [Group Policy]

I would like to simplify my life and distribute secrets (real secrets, like encryption private keys) to Active Directory domain member computers. Probably via Active Directory Group Policy, but will ...
user avatar
  • 307
3 votes
3 answers
2k views

Securing SSL certificate private key with nginx

I've been researching how to secure privaye keys for SSL certificats using nginx as a webserver, but have not been able to find many satisfactory answers. Specifically, for a client who wants to me ...
user avatar
  • 145
0 votes
1 answer
449 views

Understanding ssh automatic login and security problems

I have generated a pair of private/public ssh keys (on Linux) and they are now in my .ssh folder. I have copied my ssh id (ssh-copy-id) to a remote machine to which I want to connect without typing ...
user avatar
  • 135
1 vote
1 answer
515 views

How to configure Fail2ban with private key ssh connection on CentOs 7

I tried to install Fail2ban on my Centos 7 machine to prevent force brute connection on ssh server. I'm using a private key with a passphrase to connect. I tested Fail2ban but it doesn't block me ...
user avatar
1 vote
1 answer
338 views

Add certificate from Microsoft Azure Key Vault for LDAP/S

The only method I can seem to find to add a certificate for secure LDAP (LDAP/S) for Azure Active Directory Domain Services is to upload the certificate from my local computer. This seems like a very ...
user avatar
  • 60
0 votes
1 answer
336 views

Deploy Public Key in Windows Server

I have a Windows server in AWS and I want to deploy a public key to connect sftp authentication by key file. I use freeftpd to reach my sftp connection but the program do not support key ...
user avatar
0 votes
1 answer
28 views

Can MS AD Certificate Services maintain both public and private keys in active directory?

Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
user avatar
2 votes
0 answers
994 views

Windows service user account can't access the certificate store

Background I have a Windows 7 VM with two user accounts (condor_usr1 and condor_usr2) that is used for source code compiling. The condor_usr[1|2] accounts are members of the administrators group. I ...
user avatar
5 votes
2 answers
13k views

How to make in SSH private key from one line, three lines [closed]

i have ssh-key, something like this -----BEGIN RSA PRIVATE KEY----- my_super_secret_password -----END RSA PRIVATE KEY----- Of course this key does not work. When i am doing manual things, something, ...
user avatar
  • 501
0 votes
1 answer
1k views

Difference between cryptographic providers for Windows Server 2019 certificate authority private key?

I'm going through the process of creating a Microsoft certificate server on Windows Server 2019 and was wondering what the difference between these cryptographic providers were in the setup wizard? ...
user avatar
3 votes
1 answer
10k views

SFTP asks for passphrase for unencrypted private key, but WinSCP works fine?

Summary: I want to SFTP a file from one server to another, authorizing with a private-key. I believe the public key is installed correctly (WinSCP lets me log in with private key), and I ...
user avatar
  • 163
1 vote
1 answer
901 views

Obtaining the private key from an SSL certificate managed by GCP

I'm using Google Kubenetes Engine and I put an SSL certificate on my Ingress using Google-managed certificates I've discovered I can view the certificate using this command: gcloud beta compute ssl-...
user avatar
2 votes
1 answer
6k views

Windows Server 2019 - Certificate with private key export, encryption type

I noticed that starting in Windows Server 2019, and an unknown version of Windows 10 (I'm running 1903, and I tried on 1809 as well), when you export a certificate and choose to export it's private ...
user avatar
  • 461
11 votes
3 answers
5k views

Bastion server: use TCP forwarding VS placing private key on server

We have bastion server B. We need to SSH from A through B to C, using private key. What is the better option: Put the private SSH key on server B. We read that it's a bad idea to do that in a ...
user avatar
2 votes
1 answer
4k views

OpenSSL generate certificate with endianess,encoding and charset

I'm having some trouble creating a certificate with the openssl commandline tool. The specs for the private key are: "A digital signature using an RSA 1024 bit key with a SHA-1 hash function (...
user avatar
  • 165
4 votes
1 answer
581 views

What happens when someone gets to know the secret key (of the web server / a CA)?

basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts: What happens when someone gets to know the secret key of the ...
user avatar
2 votes
1 answer
129 views

Site hosted on EC2 / Amazon held hostage with private key

I have a new client whose previous developer has left her high & dry with her site on Amazon/EC2. He holds the private key to the instance, and though she has full access to the Amazon control ...
user avatar
  • 123
0 votes
0 answers
785 views

putty slow ssh key exchange

The problem: The key exchange between putty (Win7) and the linux ssh server takes about 10 seconds. Prior to moving my network to a new location, this didn't occur. I'm connecting to 3 different boxes ...
user avatar
1 vote
1 answer
833 views

SSH login timeout while checking private key (sss_ssh_authorizedkeys)

I am having this issue right now with 3 servers at least. When attempting to connect to the server via ssh with a private key with a specific user, it shows the welcome banner, takes almost two ...
user avatar
  • 11
0 votes
1 answer
1k views

Lost connection with ssh server through web console ssh (GCP, Putty, gcloud terminal, Filezilla)

After a year using the VM instance in debian, we changed the ssh keys to connect to other computers, after having generated the pair of public and private keys with putty, and adding it to the ...
user avatar
2 votes
1 answer
1k views

Migrating HTTPS certificates from IIS to nginx

I'm in the process of migrating from IIS on Windows 2012 to nginx on Ubuntu 16.04. I'm familiar with nginx but not IIS. On nginx, to have HTTPS working you need both the certificate and the private ...
user avatar
1 vote
0 answers
89 views

Access to http restricted area using private key

In my Apache configuration (Ubuntu Server), i have the following settings: AddExternalAuth pwauth /usr/sbin/pwauth SetExternalAuthMethod pwauth pipe <Directory /secure> ...
user avatar
0 votes
1 answer
280 views

Download private_key.pem when using ansible os_keypair

I'm using ansible os_keypair module towards Openstack, through AWX, to create a new keypair: - hosts: localhost tasks: - name: Create new keypair, ask for the name in survey os_keypair: ...
user avatar
0 votes
0 answers
42 views

SSH: Login method using Server's Private Key instead of Client's Public Keys?

Just like AWS EC2 style, how do i setup the way people SSH into my Server to be via the Server's Private Key (PEM?), instead of we uploading Clients Public Keys into Server? Idea is to share the ...
user avatar
1 vote
2 answers
182 views

What's the risk of exporting an SSL certificate to a new hosting company

On of our customers is sadly moving out to a new provider. They have an SSL certificate linked to their site. The new hosting company, also want's this certificate. Are there any (security) risks for ...
user avatar
4 votes
0 answers
4k views

haproxy ssl password protected private key

Usage: Haproxy as SSL termination Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key Problem: If i run the following command ...
user avatar
  • 41
2 votes
3 answers
23k views

SCP Unable to copy from server with Private Key

I'm trying to use SCP to copy a file from a remote VPS which uses private keys to a local machine. I'm getting different errors depending on what I try and I am not sure what the correct method ...
user avatar
  • 143
0 votes
1 answer
1k views

Why is the same private key file generating two different public key strings?

I have an ssh key pair that was generated to use as an access key for my GoCD CI/CD server. It was working but due to some configuration changes I made (moved the server out of container to a Linux ...
user avatar
3 votes
1 answer
25k views

Jsch Exception: Auth Fail with private key

I'm using below code to connect remote server and I followed below steps to connect private/public key generation & concatenate of public key with authorized key. Code: private Session ...
user avatar
  • 31
0 votes
3 answers
1k views

Zevenet Load Balancer - SSL Certificate

I am really new to this so please be nice :) I am wondering if anyone has any experience with Zevenet Load Balancers. I have setup the community version (V4). I have 2 web servers with replicated ...
user avatar
2 votes
1 answer
326 views

Offboarding someone with EB ssh access

Recently someone left our organization who had an SSH key for our production Amazon ElasticBeanstalk environment. How is this scenario typically handled? Is a new key-pair created and then ...
user avatar
  • 123
0 votes
2 answers
6k views

Where/how to store my web server's private key on centos?

I have to configure a number of webservers to use HTTPS, I wouldn't consider any 'high security', but I want to cover at least basic security best practices. I'm wondering where I should store the ...
user avatar
  • 103
13 votes
2 answers
5k views

In which order does OpenSSH try private keys?

I'm having a hard time finding proper docs on the order in which the OpenSSH client tries private keys for authenticating against a server, given that all of the following are present: key files with ...
user avatar
0 votes
1 answer
851 views

Store SSH password for combined private key and password authentication

I'm trying to get an user account to be able to be used both with private key only and private key + password. The password only really needs to be long enough for opportunity -based attacks, as I'd ...
user avatar
  • 101