Questions tagged [private-key]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
26 views

Distribute Secrets via Active Directory [Group Policy]

I would like to simplify my life and distribute secrets (real secrets, like encryption private keys) to Active Directory domain member computers. Probably via Active Directory Group Policy, but will ...
2
votes
3answers
144 views

Securing SSL certificate private key with nginx

I've been researching how to secure privaye keys for SSL certificats using nginx as a webserver, but have not been able to find many satisfactory answers. Specifically, for a client who wants to me ...
0
votes
1answer
40 views

Understanding ssh automatic login and security problems

I have generated a pair of private/public ssh keys (on Linux) and they are now in my .ssh folder. I have copied my ssh id (ssh-copy-id) to a remote machine to which I want to connect without typing ...
1
vote
1answer
87 views

How to configure Fail2ban with private key ssh connection on CentOs 7

I tried to install Fail2ban on my Centos 7 machine to prevent force brute connection on ssh server. I'm using a private key with a passphrase to connect. I tested Fail2ban but it doesn't block me ...
0
votes
0answers
56 views

Importing non-exportable certificates into Azure Key Vault?

Does somebody knows how to import a certificate into Azure Key Vault so it wouldn't be possible for anyone (including admin with highest privileges) to export its private key? Preferably into HSM, but ...
1
vote
1answer
92 views

Add certificate from Microsoft Azure Key Vault for LDAP/S

The only method I can seem to find to add a certificate for secure LDAP (LDAP/S) for Azure Active Directory Domain Services is to upload the certificate from my local computer. This seems like a very ...
0
votes
1answer
93 views

Deploy Public Key in Windows Server

I have a Windows server in AWS and I want to deploy a public key to connect sftp authentication by key file. I use freeftpd to reach my sftp connection but the program do not support key ...
0
votes
1answer
24 views

Can MS AD Certificate Services maintain both public and private keys in active directory?

Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
1
vote
0answers
199 views

Windows service user account can't access the certificate store

Background I have a Windows 7 VM with two user accounts (condor_usr1 and condor_usr2) that is used for source code compiling. The condor_usr[1|2] accounts are members of the administrators group. I ...
2
votes
2answers
2k views

How to make in SSH private key from one line, three lines [closed]

i have ssh-key, something like this -----BEGIN RSA PRIVATE KEY----- my_super_secret_password -----END RSA PRIVATE KEY----- Of course this key does not work. When i am doing manual things, something, ...
0
votes
1answer
529 views

Difference between cryptographic providers for Windows Server 2019 certificate authority private key?

I'm going through the process of creating a Microsoft certificate server on Windows Server 2019 and was wondering what the difference between these cryptographic providers were in the setup wizard? ...
2
votes
1answer
2k views

SFTP asks for passphrase for unencrypted private key, but WinSCP works fine?

Summary: I want to SFTP a file from one server to another, authorizing with a private-key. I believe the public key is installed correctly (WinSCP lets me log in with private key), and I ...
1
vote
1answer
192 views

Obtaining the private key from an SSL certificate managed by GCP

I'm using Google Kubenetes Engine and I put an SSL certificate on my Ingress using Google-managed certificates I've discovered I can view the certificate using this command: gcloud beta compute ssl-...
0
votes
1answer
2k views

Windows Server 2019 - Certificate with private key export, encryption type

I noticed that starting in Windows Server 2019, and an unknown version of Windows 10 (I'm running 1903, and I tried on 1809 as well), when you export a certificate and choose to export it's private ...
10
votes
3answers
3k views

Bastion server: use TCP forwarding VS placing private key on server

We have bastion server B. We need to SSH from A through B to C, using private key. What is the better option: Put the private SSH key on server B. We read that it's a bad idea to do that in a ...
2
votes
1answer
2k views

OpenSSL generate certificate with endianess,encoding and charset

I'm having some trouble creating a certificate with the openssl commandline tool. The specs for the private key are: "A digital signature using an RSA 1024 bit key with a SHA-1 hash function (...
3
votes
1answer
169 views

What happens when someone gets to know the secret key (of the web server / a CA)?

basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts: What happens when someone gets to know the secret key of the ...
2
votes
1answer
117 views

Site hosted on EC2 / Amazon held hostage with private key

I have a new client whose previous developer has left her high & dry with her site on Amazon/EC2. He holds the private key to the instance, and though she has full access to the Amazon control ...
0
votes
0answers
475 views

putty slow ssh key exchange

The problem: The key exchange between putty (Win7) and the linux ssh server takes about 10 seconds. Prior to moving my network to a new location, this didn't occur. I'm connecting to 3 different boxes ...
0
votes
1answer
238 views

SSH login timeout while checking private key (sss_ssh_authorizedkeys)

I am having this issue right now with 3 servers at least. When attempting to connect to the server via ssh with a private key with a specific user, it shows the welcome banner, takes almost two ...
0
votes
1answer
855 views

Lost connection with ssh server through web console ssh (GCP, Putty, gcloud terminal, Filezilla)

After a year using the VM instance in debian, we changed the ssh keys to connect to other computers, after having generated the pair of public and private keys with putty, and adding it to the ...
1
vote
1answer
788 views

Migrating HTTPS certificates from IIS to nginx

I'm in the process of migrating from IIS on Windows 2012 to nginx on Ubuntu 16.04. I'm familiar with nginx but not IIS. On nginx, to have HTTPS working you need both the certificate and the private ...
1
vote
0answers
53 views

Access to http restricted area using private key

In my Apache configuration (Ubuntu Server), i have the following settings: AddExternalAuth pwauth /usr/sbin/pwauth SetExternalAuthMethod pwauth pipe <Directory /secure> ...
0
votes
1answer
206 views

Download private_key.pem when using ansible os_keypair

I'm using ansible os_keypair module towards Openstack, through AWX, to create a new keypair: - hosts: localhost tasks: - name: Create new keypair, ask for the name in survey os_keypair: ...
0
votes
0answers
35 views

SSH: Login method using Server's Private Key instead of Client's Public Keys?

Just like AWS EC2 style, how do i setup the way people SSH into my Server to be via the Server's Private Key (PEM?), instead of we uploading Clients Public Keys into Server? Idea is to share the ...
1
vote
2answers
67 views

What's the risk of exporting an SSL certificate to a new hosting company

On of our customers is sadly moving out to a new provider. They have an SSL certificate linked to their site. The new hosting company, also want's this certificate. Are there any (security) risks for ...
2
votes
0answers
2k views

haproxy ssl password protected private key

Usage: Haproxy as SSL termination Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key Problem: If i run the following command ...
0
votes
3answers
14k views

SCP Unable to copy from server with Private Key

I'm trying to use SCP to copy a file from a remote VPS which uses private keys to a local machine. I'm getting different errors depending on what I try and I am not sure what the correct method ...
0
votes
1answer
505 views

Why is the same private key file generating two different public key strings?

I have an ssh key pair that was generated to use as an access key for my GoCD CI/CD server. It was working but due to some configuration changes I made (moved the server out of container to a Linux ...
2
votes
1answer
13k views

Jsch Exception: Auth Fail with private key

I'm using below code to connect remote server and I followed below steps to connect private/public key generation & concatenate of public key with authorized key. Code: private Session ...
0
votes
2answers
601 views

Zevenet Load Balancer - SSL Certificate

I am really new to this so please be nice :) I am wondering if anyone has any experience with Zevenet Load Balancers. I have setup the community version (V4). I have 2 web servers with replicated ...
2
votes
1answer
295 views

Offboarding someone with EB ssh access

Recently someone left our organization who had an SSH key for our production Amazon ElasticBeanstalk environment. How is this scenario typically handled? Is a new key-pair created and then ...
0
votes
2answers
4k views

Where/how to store my web server's private key on centos?

I have to configure a number of webservers to use HTTPS, I wouldn't consider any 'high security', but I want to cover at least basic security best practices. I'm wondering where I should store the ...
10
votes
2answers
2k views

In which order does OpenSSH try private keys?

I'm having a hard time finding proper docs on the order in which the OpenSSH client tries private keys for authenticating against a server, given that all of the following are present: key files with ...
0
votes
1answer
426 views

Store SSH password for combined private key and password authentication

I'm trying to get an user account to be able to be used both with private key only and private key + password. The password only really needs to be long enough for opportunity -based attacks, as I'd ...
5
votes
1answer
2k views

Packer won't correctly use private key for SSH auth in provisioning step

I use Packer to build VirtualBox images, with the Ansible provisioner to set up the images. The builder step creates a temporary user (ssh_username and ssh_password). The Ansible provisioner runs ...
0
votes
2answers
1k views

why can I not log in to this server?

I am trying to log in to a centos 6.8 server and I have the ip address and correct password. It stored the private key in my known_hosts file, but then I forgot about. My colleague can login from his ...
1
vote
1answer
74 views

Allow system accounts to login to other server without passwords

i'd like to allow user 'devel' to login to any other server using public keys as user 'devel'. This user is not a human, but a scripting-only account. How can I accomplish this? Is Puppet the right ...
0
votes
0answers
162 views

Store and read private key securely

i'm wondering what would be the best way to store private key in web server and read it from web apps? So far the action taken is the directory of private key will deny all access from browser, and ...
1
vote
0answers
2k views

curl SSL protocol error in connection to shbr-staging.surescripts.net

I am trying to connect to: shbr-staging.surescripts.net/ Here are the steps that I have followed: Step 1: I generated a private key $openssl genrsa -des3 -out sc-private.key 2048 passphrase: ...
0
votes
1answer
78 views

How to avoid asking password when logging via SSH Key?

I have this scenario: I login to dns1 with key and same with dns2. Suddenly for each of the keys I used it started to ask me server password, this was never happening in past, and I did no changes on ...
2
votes
2answers
8k views

Cannot ssh with shared keys on CentOS 7 server refused our key

I cannot ssh to a CentOS 7 server using pre-shared keys, I get a "server refused our key" message. Below is an ssh attempt using -vv OpenSSH_7.2p2, OpenSSL 1.0.2h-fips 3 May 2016 debug1: Reading ...
20
votes
2answers
2k views

Receiving a private key from server admin: ok or not?

I am to get access to a remote SFTP server. The admin has created a user for me, and generated a public/private key pair for me. Then he securely sent me the private key file, which I use for ...
0
votes
2answers
3k views

Nginx working with SSL but Private Key mismatch error

Used to work I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files: sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -...
5
votes
1answer
20k views

How to export private key? (GnuPG) [closed]

I have successfully created GnuPG public/private key pair using RSA and RSA algorithm. How can I export a public key and private key in the form of file with the .asc extension?
2
votes
1answer
3k views

Using wireshark to determine which RSA PRIVATE KEY SSL conversation?

Situation I have a client VM and server VM communicating using SSL. The client VM runs wireshark capture using CLI Wireshark GUI is running locally on a different machine. Steps As USER on the ...
1
vote
2answers
758 views

Node.js app on ElasticBeanstalk cannot access private key file on server

I have a node.js application running on ElasticBeanstalk. Part of it's configuration is a path to a .p12 key file. When the application attempts to use the key file, a permission denied exception is ...
0
votes
0answers
188 views

OpenVpn Client credentials security, key crt generation

I'm curious what is Your opinion on openvpn client crt/key security In most cases (tutorials), the clients key/crt are generated on the same openvpn server, and no one cares about the future. This is ...
4
votes
3answers
10k views

Apache SSL without Private Key

We are currently working with a client who needs SAML authentication to setup their QA site on our servers. They have sent us the CRT file for the SSL to install, however they are not sending the key. ...
-1
votes
1answer
67 views

Restrict su - user for a user having public-private key pair

We have a user named user_root in our Linux environment. For which we have created the key-pair in AWS. This is our root user and our administrators log in with this username and the ppk file. We don'...