Questions tagged [private-key]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
2answers
44 views

Public/private key

I just watch this video https://youtu.be/ZhMw53Ud2tY and the question I have is if I have to generate a public/private key pair for each server I’m looking to login to or if I just generate one pair ...
0
votes
1answer
20 views

Apache SSL certificate and Private key

we've a server apache and the certificate is expired. We have an SSL Wildcard certificate issued by Sectigo. I generated the new certificate on our reseller site and we're going to upload it in the ...
1
vote
1answer
58 views

Powershell self-signed certifcate private key not exportable

Using Powershell, I'm attempting to create a self-signed ssl certificate with a private key that can be exported. I've read and followed various tutorials, however the end result is always that no ...
1
vote
3answers
306 views

SSH from A through B to C, using IdentityFile on A

I've see some similar questions but without a clear way forward, if this was already answered before please close this one. My scenario is: Host C is not accessible from A. Host B is accessible from ...
0
votes
1answer
62 views

Private ssh key not working in some devices. “Error: permission denied (publickey).”

I have a virtual server. Recently, I disabled PasswordAuthentication to make it more secure. I had already created a key pair using Puttygen in Windows. I converted the private key (.ppk) using putty-...
0
votes
0answers
29 views

Does a non-admin Windows user have ability to export private key from a key container in the RSA MachineKeys folder

If a non-admin Windows10 user has been granted ACL read permissions on the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder and has been granted read access to the key container using ...
2
votes
0answers
578 views

How do I fix 'Missing stored keyset' through a remote powershell session (without also being RDP'ed in)

I'm trying to script the installation of our on-premise CI/CD agent. Part of that is installing some certificates Powershell Import-Certificate -FilePath self_signed_CA.cer -CertStoreLocation cert:\...
0
votes
1answer
79 views

Distribute Secrets via Active Directory [Group Policy]

I would like to simplify my life and distribute secrets (real secrets, like encryption private keys) to Active Directory domain member computers. Probably via Active Directory Group Policy, but will ...
3
votes
3answers
875 views

Securing SSL certificate private key with nginx

I've been researching how to secure privaye keys for SSL certificats using nginx as a webserver, but have not been able to find many satisfactory answers. Specifically, for a client who wants to me ...
0
votes
1answer
310 views

Understanding ssh automatic login and security problems

I have generated a pair of private/public ssh keys (on Linux) and they are now in my .ssh folder. I have copied my ssh id (ssh-copy-id) to a remote machine to which I want to connect without typing ...
1
vote
1answer
350 views

How to configure Fail2ban with private key ssh connection on CentOs 7

I tried to install Fail2ban on my Centos 7 machine to prevent force brute connection on ssh server. I'm using a private key with a passphrase to connect. I tested Fail2ban but it doesn't block me ...
1
vote
1answer
202 views

Add certificate from Microsoft Azure Key Vault for LDAP/S

The only method I can seem to find to add a certificate for secure LDAP (LDAP/S) for Azure Active Directory Domain Services is to upload the certificate from my local computer. This seems like a very ...
0
votes
1answer
239 views

Deploy Public Key in Windows Server

I have a Windows server in AWS and I want to deploy a public key to connect sftp authentication by key file. I use freeftpd to reach my sftp connection but the program do not support key ...
0
votes
1answer
25 views

Can MS AD Certificate Services maintain both public and private keys in active directory?

Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
2
votes
0answers
563 views

Windows service user account can't access the certificate store

Background I have a Windows 7 VM with two user accounts (condor_usr1 and condor_usr2) that is used for source code compiling. The condor_usr[1|2] accounts are members of the administrators group. I ...
3
votes
2answers
6k views

How to make in SSH private key from one line, three lines [closed]

i have ssh-key, something like this -----BEGIN RSA PRIVATE KEY----- my_super_secret_password -----END RSA PRIVATE KEY----- Of course this key does not work. When i am doing manual things, something, ...
0
votes
1answer
1k views

Difference between cryptographic providers for Windows Server 2019 certificate authority private key?

I'm going through the process of creating a Microsoft certificate server on Windows Server 2019 and was wondering what the difference between these cryptographic providers were in the setup wizard? ...
2
votes
1answer
6k views

SFTP asks for passphrase for unencrypted private key, but WinSCP works fine?

Summary: I want to SFTP a file from one server to another, authorizing with a private-key. I believe the public key is installed correctly (WinSCP lets me log in with private key), and I ...
1
vote
1answer
443 views

Obtaining the private key from an SSL certificate managed by GCP

I'm using Google Kubenetes Engine and I put an SSL certificate on my Ingress using Google-managed certificates I've discovered I can view the certificate using this command: gcloud beta compute ssl-...
1
vote
1answer
3k views

Windows Server 2019 - Certificate with private key export, encryption type

I noticed that starting in Windows Server 2019, and an unknown version of Windows 10 (I'm running 1903, and I tried on 1809 as well), when you export a certificate and choose to export it's private ...
10
votes
3answers
4k views

Bastion server: use TCP forwarding VS placing private key on server

We have bastion server B. We need to SSH from A through B to C, using private key. What is the better option: Put the private SSH key on server B. We read that it's a bad idea to do that in a ...
2
votes
1answer
3k views

OpenSSL generate certificate with endianess,encoding and charset

I'm having some trouble creating a certificate with the openssl commandline tool. The specs for the private key are: "A digital signature using an RSA 1024 bit key with a SHA-1 hash function (...
3
votes
1answer
382 views

What happens when someone gets to know the secret key (of the web server / a CA)?

basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts: What happens when someone gets to know the secret key of the ...
2
votes
1answer
119 views

Site hosted on EC2 / Amazon held hostage with private key

I have a new client whose previous developer has left her high & dry with her site on Amazon/EC2. He holds the private key to the instance, and though she has full access to the Amazon control ...
0
votes
0answers
654 views

putty slow ssh key exchange

The problem: The key exchange between putty (Win7) and the linux ssh server takes about 10 seconds. Prior to moving my network to a new location, this didn't occur. I'm connecting to 3 different boxes ...
1
vote
1answer
495 views

SSH login timeout while checking private key (sss_ssh_authorizedkeys)

I am having this issue right now with 3 servers at least. When attempting to connect to the server via ssh with a private key with a specific user, it shows the welcome banner, takes almost two ...
0
votes
1answer
1k views

Lost connection with ssh server through web console ssh (GCP, Putty, gcloud terminal, Filezilla)

After a year using the VM instance in debian, we changed the ssh keys to connect to other computers, after having generated the pair of public and private keys with putty, and adding it to the ...
1
vote
1answer
1k views

Migrating HTTPS certificates from IIS to nginx

I'm in the process of migrating from IIS on Windows 2012 to nginx on Ubuntu 16.04. I'm familiar with nginx but not IIS. On nginx, to have HTTPS working you need both the certificate and the private ...
1
vote
0answers
71 views

Access to http restricted area using private key

In my Apache configuration (Ubuntu Server), i have the following settings: AddExternalAuth pwauth /usr/sbin/pwauth SetExternalAuthMethod pwauth pipe <Directory /secure> ...
0
votes
1answer
243 views

Download private_key.pem when using ansible os_keypair

I'm using ansible os_keypair module towards Openstack, through AWX, to create a new keypair: - hosts: localhost tasks: - name: Create new keypair, ask for the name in survey os_keypair: ...
0
votes
0answers
37 views

SSH: Login method using Server's Private Key instead of Client's Public Keys?

Just like AWS EC2 style, how do i setup the way people SSH into my Server to be via the Server's Private Key (PEM?), instead of we uploading Clients Public Keys into Server? Idea is to share the ...
1
vote
2answers
125 views

What's the risk of exporting an SSL certificate to a new hosting company

On of our customers is sadly moving out to a new provider. They have an SSL certificate linked to their site. The new hosting company, also want's this certificate. Are there any (security) risks for ...
3
votes
0answers
3k views

haproxy ssl password protected private key

Usage: Haproxy as SSL termination Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key Problem: If i run the following command ...
1
vote
3answers
19k views

SCP Unable to copy from server with Private Key

I'm trying to use SCP to copy a file from a remote VPS which uses private keys to a local machine. I'm getting different errors depending on what I try and I am not sure what the correct method ...
0
votes
1answer
832 views

Why is the same private key file generating two different public key strings?

I have an ssh key pair that was generated to use as an access key for my GoCD CI/CD server. It was working but due to some configuration changes I made (moved the server out of container to a Linux ...
3
votes
1answer
19k views

Jsch Exception: Auth Fail with private key

I'm using below code to connect remote server and I followed below steps to connect private/public key generation & concatenate of public key with authorized key. Code: private Session ...
0
votes
2answers
826 views

Zevenet Load Balancer - SSL Certificate

I am really new to this so please be nice :) I am wondering if anyone has any experience with Zevenet Load Balancers. I have setup the community version (V4). I have 2 web servers with replicated ...
2
votes
1answer
307 views

Offboarding someone with EB ssh access

Recently someone left our organization who had an SSH key for our production Amazon ElasticBeanstalk environment. How is this scenario typically handled? Is a new key-pair created and then ...
0
votes
2answers
5k views

Where/how to store my web server's private key on centos?

I have to configure a number of webservers to use HTTPS, I wouldn't consider any 'high security', but I want to cover at least basic security best practices. I'm wondering where I should store the ...
10
votes
2answers
3k views

In which order does OpenSSH try private keys?

I'm having a hard time finding proper docs on the order in which the OpenSSH client tries private keys for authenticating against a server, given that all of the following are present: key files with ...
0
votes
1answer
575 views

Store SSH password for combined private key and password authentication

I'm trying to get an user account to be able to be used both with private key only and private key + password. The password only really needs to be long enough for opportunity -based attacks, as I'd ...
5
votes
1answer
3k views

Packer won't correctly use private key for SSH auth in provisioning step

I use Packer to build VirtualBox images, with the Ansible provisioner to set up the images. The builder step creates a temporary user (ssh_username and ssh_password). The Ansible provisioner runs ...
0
votes
2answers
2k views

why can I not log in to this server?

I am trying to log in to a centos 6.8 server and I have the ip address and correct password. It stored the private key in my known_hosts file, but then I forgot about. My colleague can login from his ...
1
vote
1answer
74 views

Allow system accounts to login to other server without passwords

i'd like to allow user 'devel' to login to any other server using public keys as user 'devel'. This user is not a human, but a scripting-only account. How can I accomplish this? Is Puppet the right ...
0
votes
0answers
165 views

Store and read private key securely

i'm wondering what would be the best way to store private key in web server and read it from web apps? So far the action taken is the directory of private key will deny all access from browser, and ...
1
vote
0answers
2k views

curl SSL protocol error in connection to shbr-staging.surescripts.net

I am trying to connect to: shbr-staging.surescripts.net/ Here are the steps that I have followed: Step 1: I generated a private key $openssl genrsa -des3 -out sc-private.key 2048 passphrase: ...
0
votes
1answer
81 views

How to avoid asking password when logging via SSH Key?

I have this scenario: I login to dns1 with key and same with dns2. Suddenly for each of the keys I used it started to ask me server password, this was never happening in past, and I did no changes on ...
2
votes
2answers
10k views

Cannot ssh with shared keys on CentOS 7 server refused our key

I cannot ssh to a CentOS 7 server using pre-shared keys, I get a "server refused our key" message. Below is an ssh attempt using -vv OpenSSH_7.2p2, OpenSSL 1.0.2h-fips 3 May 2016 debug1: Reading ...
20
votes
2answers
2k views

Receiving a private key from server admin: ok or not?

I am to get access to a remote SFTP server. The admin has created a user for me, and generated a public/private key pair for me. Then he securely sent me the private key file, which I use for ...
0
votes
2answers
4k views

Nginx working with SSL but Private Key mismatch error

Used to work I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files: sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -...