Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [private-key]

The tag has no usage guidance.

-1
votes
0answers
16 views

Check relation between .key and .pem

I created my private key and the public key corresponding with the following command : > openssl req -newkey rsa:2048 -nodes -keyout dnsdist.key -x509 -days365 -out dnsdist.pem I using them in ...
0
votes
1answer
30 views

OpenSSL generate certificate with endianess,encoding and charset

I'm having some trouble creating a certificate with the openssl commandline tool. The specs for the private key are: "A digital signature using an RSA 1024 bit key with a SHA-1 hash function (...
3
votes
1answer
40 views

What happens when someone gets to know the secret key (of the web server / a CA)?

basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts: What happens when someone gets to know the secret key of the ...
3
votes
1answer
101 views

Site hosted on EC2 / Amazon held hostage with private key

I have a new client whose previous developer has left her high & dry with her site on Amazon/EC2. He holds the private key to the instance, and though she has full access to the Amazon control ...
0
votes
0answers
93 views

putty slow ssh key exchange

The problem: The key exchange between putty (Win7) and the linux ssh server takes about 10 seconds. Prior to moving my network to a new location, this didn't occur. I'm connecting to 3 different boxes ...
0
votes
1answer
47 views

SSH login timeout while checking private key (sss_ssh_authorizedkeys)

I am having this issue right now with 3 servers at least. When attempting to connect to the server via ssh with a private key with a specific user, it shows the welcome banner, takes almost two ...
0
votes
1answer
183 views

Lost connection with ssh server through web console ssh (GCP, Putty, gcloud terminal, Filezilla)

After a year using the VM instance in debian, we changed the ssh keys to connect to other computers, after having generated the pair of public and private keys with putty, and adding it to the ...
0
votes
1answer
121 views

Migrating HTTPS certificates from IIS to nginx

I'm in the process of migrating from IIS on Windows 2012 to nginx on Ubuntu 16.04. I'm familiar with nginx but not IIS. On nginx, to have HTTPS working you need both the certificate and the private ...
1
vote
0answers
28 views

Access to http restricted area using private key

In my Apache configuration (Ubuntu Server), i have the following settings: AddExternalAuth pwauth /usr/sbin/pwauth SetExternalAuthMethod pwauth pipe <Directory /secure> ...
0
votes
1answer
74 views

Download private_key.pem when using ansible os_keypair

I'm using ansible os_keypair module towards Openstack, through AWX, to create a new keypair: - hosts: localhost tasks: - name: Create new keypair, ask for the name in survey os_keypair: ...
0
votes
0answers
27 views

SSH: Login method using Server's Private Key instead of Client's Public Keys?

Just like AWS EC2 style, how do i setup the way people SSH into my Server to be via the Server's Private Key (PEM?), instead of we uploading Clients Public Keys into Server? Idea is to share the ...
0
votes
0answers
44 views

Accidentally used SSL private key as public and vice versa

I did something really stupid. On my mail server, I accidentally mixed up the public and private SSL keys. Should I re-generate them, and how would I do that? I am using Certbot to generate ...
1
vote
2answers
52 views

What's the risk of exporting an SSL certificate to a new hosting company

On of our customers is sadly moving out to a new provider. They have an SSL certificate linked to their site. The new hosting company, also want's this certificate. Are there any (security) risks for ...
1
vote
0answers
1k views

haproxy ssl password protected private key

Usage: Haproxy as SSL termination Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key Problem: If i run the following command ...
0
votes
3answers
2k views

SCP Unable to copy from server with Private Key

I'm trying to use SCP to copy a file from a remote VPS which uses private keys to a local machine. I'm getting different errors depending on what I try and I am not sure what the correct method ...
0
votes
1answer
84 views

Why is the same private key file generating two different public key strings?

I have an ssh key pair that was generated to use as an access key for my GoCD CI/CD server. It was working but due to some configuration changes I made (moved the server out of container to a Linux ...
2
votes
1answer
3k views

Jsch Exception: Auth Fail with private key

I'm using below code to connect remote server and I followed below steps to connect private/public key generation & concatenate of public key with authorized key. Code: private Session ...
0
votes
1answer
264 views

Zevenet Load Balancer - SSL Certificate

I am really new to this so please be nice :) I am wondering if anyone has any experience with Zevenet Load Balancers. I have setup the community version (V4). I have 2 web servers with replicated ...
2
votes
1answer
216 views

Offboarding someone with EB ssh access

Recently someone left our organization who had an SSH key for our production Amazon ElasticBeanstalk environment. How is this scenario typically handled? Is a new key-pair created and then ...
0
votes
2answers
2k views

Where/how to store my web server's private key on centos?

I have to configure a number of webservers to use HTTPS, I wouldn't consider any 'high security', but I want to cover at least basic security best practices. I'm wondering where I should store the ...
4
votes
2answers
671 views

In which order does OpenSSH try private keys?

I'm having a hard time finding proper docs on the order in which the OpenSSH client tries private keys for authenticating against a server, given that all of the following are present: key files with ...
0
votes
1answer
230 views

Store SSH password for combined private key and password authentication

I'm trying to get an user account to be able to be used both with private key only and private key + password. The password only really needs to be long enough for opportunity -based attacks, as I'd ...
4
votes
0answers
884 views

Packer won't correctly use private key for SSH auth in provisioning step

I use Packer to build VirtualBox images, with the Ansible provisioner to set up the images. The builder step creates a temporary user (ssh_username and ssh_password). The Ansible provisioner runs ...
0
votes
2answers
420 views

why can I not log in to this server?

I am trying to log in to a centos 6.8 server and I have the ip address and correct password. It stored the private key in my known_hosts file, but then I forgot about. My colleague can login from his ...
1
vote
1answer
66 views

Allow system accounts to login to other server without passwords

i'd like to allow user 'devel' to login to any other server using public keys as user 'devel'. This user is not a human, but a scripting-only account. How can I accomplish this? Is Puppet the right ...
0
votes
0answers
121 views

Store and read private key securely

i'm wondering what would be the best way to store private key in web server and read it from web apps? So far the action taken is the directory of private key will deny all access from browser, and ...
1
vote
0answers
2k views

curl SSL protocol error in connection to shbr-staging.surescripts.net

I am trying to connect to: shbr-staging.surescripts.net/ Here are the steps that I have followed: Step 1: I generated a private key $openssl genrsa -des3 -out sc-private.key 2048 passphrase: ...
0
votes
1answer
67 views

How to avoid asking password when logging via SSH Key?

I have this scenario: I login to dns1 with key and same with dns2. Suddenly for each of the keys I used it started to ask me server password, this was never happening in past, and I did no changes on ...
2
votes
2answers
5k views

Cannot ssh with shared keys on CentOS 7 server refused our key

I cannot ssh to a CentOS 7 server using pre-shared keys, I get a "server refused our key" message. Below is an ssh attempt using -vv OpenSSH_7.2p2, OpenSSL 1.0.2h-fips 3 May 2016 debug1: Reading ...
19
votes
2answers
2k views

Receiving a private key from server admin: ok or not?

I am to get access to a remote SFTP server. The admin has created a user for me, and generated a public/private key pair for me. Then he securely sent me the private key file, which I use for ...
0
votes
2answers
2k views

Nginx working with SSL but Private Key mismatch error

Used to work I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files: sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -...
4
votes
1answer
15k views

How to export private key? (GnuPG) [closed]

I have successfully created GnuPG public/private key pair using RSA and RSA algorithm. How can I export a public key and private key in the form of file with the .asc extension?
2
votes
1answer
2k views

Using wireshark to determine which RSA PRIVATE KEY SSL conversation?

Situation I have a client VM and server VM communicating using SSL. The client VM runs wireshark capture using CLI Wireshark GUI is running locally on a different machine. Steps As USER on the ...
1
vote
2answers
578 views

Node.js app on ElasticBeanstalk cannot access private key file on server

I have a node.js application running on ElasticBeanstalk. Part of it's configuration is a path to a .p12 key file. When the application attempts to use the key file, a permission denied exception is ...
0
votes
0answers
127 views

OpenVpn Client credentials security, key crt generation

I'm curious what is Your opinion on openvpn client crt/key security In most cases (tutorials), the clients key/crt are generated on the same openvpn server, and no one cares about the future. This is ...
2
votes
3answers
6k views

Apache SSL without Private Key

We are currently working with a client who needs SAML authentication to setup their QA site on our servers. They have sent us the CRT file for the SSL to install, however they are not sending the key. ...
-1
votes
1answer
55 views

Restrict su - user for a user having public-private key pair

We have a user named user_root in our Linux environment. For which we have created the key-pair in AWS. This is our root user and our administrators log in with this username and the ppk file. We don'...
0
votes
1answer
6k views

ssh - Why isn't it trying my private key? [closed]

I'm trying to connect to a remote SSH server using a private key at ~/.ssh/id_rsa. When I ssh -v to the server I get the following: ... debug1: Authentications that can continue: publickey debug1: ...
3
votes
1answer
273 views

Keeping track of SSH private keys without comments

SSH public keys support comments (which simply consist of text appended to the end of the key), which makes it easy to identify an otherwise unidentifiable id_rsa.pub file. You can use the comment to ...
4
votes
2answers
956 views

How to SSH to a remote server using a private key on Linux?

I have been trying to connect to a remote server using my private key file from the terminal, but it doesn't seem to work. I don't understand why. Here is how I do it: $ ssh -i private.ppk oap@10.20....
0
votes
1answer
45 views

Centos requires me to change my password while I'm using private keys

I tried to login to my remote CentOS server using my private key and I was surprised to get this message : There were 29031 failed login attempts since the last successful login. After that it ...
8
votes
1answer
2k views

Can I get anSHA-256 certificate when the CSR is for SHA-1?

I've read: By default, OpenSSL cryptographic tools are configured to make SHA1 signatures. for example, if you want to generate a SHA256-signed certificate request (CSR) , add in the command line:...
0
votes
1answer
290 views

How to use PuttyGen.exe when moving key(s) from old machine to a new machine?

I've only generated the public/private key pair in PuttyGen.exe once. This was the first time I've ever used this tool. Rather than having the folks hosting the server that I'm connecting to, who ...
0
votes
2answers
511 views

Security measures of Linux 'certificate store'

I know that windows is using a kind of master key for encrypting private keys which are stored in the certificate store of the OS. Moreover I found out that the certificates and keys in linux are not ...
1
vote
1answer
486 views

Google Cloud auth access key secret key?

Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
1
vote
1answer
715 views

md5 sum of private key is different from that of certificate and CSR

the output of: openssl req -noout -modulus -in presentCSR.csr and openssl x509 -noout -modulus -in server_new.crt | openssl md5 matches. But the output of openssl rsa -noout -modulus -in server....
9
votes
8answers
5k views

Ssh key accepted by host but client disconnect

Helo, I have a problem with SSH after fedora 23 installation. When i wan't to connect to my remote host with private key my host find the key : debug1: matching key found: file /home/theo/.ssh/...
0
votes
2answers
1k views

Give private key ownership to user without /home

so I am looking to set up ssh private/public keys between two servers, for use with sftp (and ultimately lftp using sftp - but one step at a time). I have created the private and public keys, and ...
1
vote
1answer
2k views

Can I use kadmin (Linux) to add/remote SPNs from an Active Directory server?

Is it possible to use kadmin (Linux) to add/remote SPNs from an Active Directory server? I'm trying to add some service principles on my Active Directory server and store the keys in the local keytab ...
0
votes
1answer
7k views

How to create a SSL certificate using SSL certificate text from StartSSL?

I have received a certificate from StartSSL for my domain in pure text which looks somewhat like: -----BEGIN CERTIFICATE----- [...]Many letters and digits[...] -----END CERTIFICATE----- I'm trying ...