Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [rsa]

The tag has no usage guidance.

12
votes
10answers
57k views

SSH Suddenly returning Invalid format

So a while ago I set up a server on AWS, and used their generated SSH key. I saved the key to Lastpass, and have successfully retrieved it from there before, and got it working. However, after trying ...
0
votes
1answer
3k views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
0
votes
0answers
10 views

OpenVPN,EasyRSA :system was unable to find the specified registry key or value

I've installed (as Admin) latest version of OpenVPN (2.4.7-I603) on Windows 2012 x64. I've checked on installer EasyRSA 2. Then trying to generate the certificate go in path ..\program files\OpenVPN\...
1
vote
4answers
3k views

Passwordless root SSH on CentOS 6 with public key

I am trying to create a "passwordless" setup so that the remote server is more secure without password + I can automate the login process. I have created a new ssh key with ssh-keygen, and copied the ...
8
votes
5answers
29k views

Auto accept rsa key fingerprint from command line

I've tried yes | ssh root@10.x.x.x to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
0
votes
3answers
4k views

Generating a CSR fails with 'routines:RSA_sign:digest too big for rsa' - for heroku

I tried generating a CSR by following Heroku instructions. Specifically openssl genrsa -des3 -out server.pass.key 2048 openssl rsa -in server.pass.key -out server.key openssl req -nodes -new -key ...
3
votes
4answers
16k views

SSH login without password

I know that you can use ssh-keygen to generate a public/private key pair. Then you can install the public key on a remote server. You can then login without supplying a password. I haven't been ...
3
votes
1answer
1k views

is there a way to tail a log from remote server without using any user credentials?

I run a script tailing a log in a remote server, like so: ssh userx@someip tail -f /data/current.log|python2.7 monitorlog.py There are dependencies and service requirements that disallows me to run ...
58
votes
4answers
115k views

How to check if an RSA public / private key pair match

I have two files, id_rsa and id_rsa.pub. What command can be used to validate if they are a valid pair?
11
votes
7answers
30k views

SSH connection asks for password although key is accepted

I'm getting prompted for a password even though it looks like my SSH key is accepted. As far as I can tell, the line "Server accepts key: pkalg ssh-rsa blen 277" in the logs below mean my key is ...
7
votes
2answers
38k views

Cannot decrypt private key eventhough I know passphrase

I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure. I am trying to use standard ...
0
votes
0answers
34 views

ssh and scp are using different directions for ssh config files

So when I connect to the server via ssh it is reading my users ssh config. When I use scp to connect something to the server it is using the config under /etc/ssh/. Where I can set the path for ssh ...
0
votes
1answer
280 views

Convert rsa to ppk file in MAC

I want to convert the id_rsa file to ppk file. I found there are many websites teaching "how to convert ppk to rsa in MAC" but not vice versa. Is there a way to convert rsa private key to ppk for ...
0
votes
3answers
1k views

Error when install SSL certificate on MediaTemple GS server

Here is what happened: I generate the CSR via the MediaTemple site (that is the only way to do it. since a GS is a share server). Send it over the namecheap.com (its signed by RapidSSL). When I got ...
5
votes
2answers
42k views

Can't allow users to log in via SSH (Bash, OpenSSH, CentOS 6.5)

I am running a CentOS 6.5 machine remotely via SSH. I use RSA keys and have disabled password authentication. The problem that I am having is that whenever I add a new user and want him/her to log in ...
0
votes
0answers
16 views

IPv6 SLAAC support for servers OoB adapters

What is the status of SLAAC support for IBM Integrated Management Module, Dell iDRAC, HP iLO, etc? Or if this is not supported, then is one able to configure IPv6 address manually?
16
votes
10answers
26k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The questions ...
478
votes
31answers
788k views

How do I tell Git for Windows where to find my private RSA key?

My Git setup runs fine on Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private SSH key (or, better still, how to tell ssh ...
1
vote
2answers
1k views

SSH looking for id_rsa-cert get key_load_public error

1) My ~/.ssh folder has the permission: drwx------. 2 user user 4.0K Aug 19 15:39 .ssh 2) I run ssh-keygen -t rsa and get the defaults files id_rsa and id_rsa.pub. 3) I copy/paste my id_rsa.pub key ...
55
votes
1answer
59k views

How do I validate an RSA SSH public key file (id_rsa.pub)?

Is there a command I can use to verify the public key (id_rsa.pub), just the format only. Sometimes I have added a new linebreak, sometimes the file missed the ssh-rsa prefix, so is there a command ...
9
votes
1answer
5k views

ssh: id_rsa doesn't work, but if I rename it, it works

I have this id_rsa in my ~/.ssh folder. But it just doesn't authenticate. If I copy it and rename it to anything not id_rsa, it works. [qfan@mycomputer .ssh]$ ls -al id_rsa id_rsa_good -rw------- 1 ...
126
votes
3answers
49k views

Possible to change email address in keypair?

I've created an RSA keypair that I used for SSH, and it includes my email address. (At the end of the public key.) I've now changed my email address. Is it possible to change the email address on ...
1
vote
3answers
2k views

openvpn client certificate error with “unsupported purpose”

I was following this wiki instruction to generate OpenVPN client certificate. This involves: easyrsa gen-req client1 nopass I tried to use this client1 certificate in my OpenVPN setup. The server ...
0
votes
3answers
4k views

Generate pfx certificate from pem rsa

I have a PEM RSA private key generated with opendkim: # dkim-genkey -t -s code001 -d domain.com and for use it with exchange, i need to convert it to pfx with this command: # openssl pkcs12 -export ...
0
votes
1answer
28 views

How to disable certain user rsa certificate?

Suppose we create certificates for openvpn using easy-rsa. And we have two clients - client1 and client2 with their certificates etc. Suppose that some time later we need to disable client2 ...
0
votes
1answer
341 views

How to make sure TLS is using AES 256

I am trying to establish a secure TLS connection between my system and a third party API. Third party mandates that I have to use AES 256 for all communication, Now I have installed a X509 ...
7
votes
9answers
24k views

sshd shuts down with “No supported key exchange algorithms” error

sshd $ /usr/sbin/sshd -f testconfig -p 22025 -d debug1: sshd version OpenSSH_5.2p1 debug1: private host key: #0 type 0 RSA1 debug1: read PEM private key done: type RSA debug1: private host key: #1 ...
1
vote
1answer
35 views

How to test Remote host Identification for changes without ssh

I have a script which runs and makes the assumption that the remote host key is in known_hosts when running some commands which use SSH. I would like to know if there is some command that can be ran ...
0
votes
0answers
25 views

Multi-Factor Authentication varieties and is there a universal bridge for them

I am trying to research a project on how to connect to multiple enterprise environments that employ multi-factor authentication using a singular approach. My question is, are there any systems out ...
39
votes
6answers
123k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
3
votes
3answers
605 views

Server still prompts for password after SSH configuration, Ubuntu 17.10 x64

EDIT: After consulting verbose logs as was suggested, I found the error myself. Answer is at the bottom. I have a DigitalOcean droplet I want to use as a development environment. I've created a non-...
1
vote
0answers
146 views

Direct Access and RSA Authentication

We're having ongoing issues trying to setup DirectAccess with RSA SecureID OTP. On it's own DirectAccess is working great, however after I configure the OTP authentication I can't get my client to ...
16
votes
4answers
13k views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
1
vote
2answers
1k views

Enforce sshd key algorithm

In ssh_config I have the HostKeyAlgorithms parameter where I can enforce the use of DSS algorithm for the key, like: HostKeyAlgorithms "ssh-dss" How can I do this in sshd_config (daemon config) in ...
1
vote
1answer
213 views

Setup rsa-keygen when using ssh for a different user

I have server 1 running aix configured at 192.168.0.1 and and another Linux server configured at 192.168.0.2. I am currently using expect to login as root@192.168.0.2. The problem is that the ...
2
votes
3answers
2k views

IIS not sending intermediate SSL certificate

I installed a Comodo Certificate on Windows Server 2012 / IIS 8.5. For most clients this certificate works without a hitch, but older Android units running Chrome and also Chrome on MacOS Sierra ...
0
votes
1answer
200 views

Why is the same private key file generating two different public key strings?

I have an ssh key pair that was generated to use as an access key for my GoCD CI/CD server. It was working but due to some configuration changes I made (moved the server out of container to a Linux ...
-1
votes
1answer
39 views

Add RSA login access to a new linux user [closed]

I have automatically created rsa connection for user "root" via hosting installation script. I just added two new users and my question is how to configure them in SSH to login with their rsa keys? ...
0
votes
2answers
143 views

copy ssh key from windows to synology disk

I'm trying to set up a git server on my synology following this tutorial. The step I'm stuck at is this: copy public rsa key from local computer to gituser account on server I use following command: ...
1
vote
3answers
3k views

setting minimum size of accepted rsa key

Is there a way to set the minimum size accepted by sshd as an RSA public key? I want to restrict users to using RSA keys that are generated with ssh-keygen -b 8196 or greater. I didn't see any ...
1
vote
1answer
2k views

Server Remote Console Stopped working after reboot

I was working on IBM x3650 M4 Physical server running Red Hat 6.4 with HA LVM. I upgraded the kernel to latest version and reboot it. The server came up just fine and booted with latest kernel. Then ...
1
vote
1answer
2k views

Where is cli.ini letsencrypt config file?

Where is the cli.ini file for default letsencrypt package? From Let's Encrypt docs, it's possible to set default rsa key length in a cli.ini file, however, I cannot find this file. I want to make ...
5
votes
1answer
17k views

How to export private key? (GnuPG) [closed]

I have successfully created GnuPG public/private key pair using RSA and RSA algorithm. How can I export a public key and private key in the form of file with the .asc extension?
0
votes
1answer
79 views

SSL S2S communication, protocol and ciphers

about a server/server S2S communication: 1st server has on Apache .conf: SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-...
0
votes
1answer
466 views

Puppet use master's ssh key for git clone?

I'm using the vcsrepo puppet module to sync git repositories. # install git repo vcsrepo { "/home/repo": ensure => present, provider => git, source => "git@bitbucket.org:...
0
votes
1answer
27 views

which public rsa keybelongs to which secret?

Is there a way to find out which public rsa key belongs to which secret key? I have two pairs lying around, and would like to know ehich one is which.
0
votes
1answer
565 views

How to verify RSA fingerprint for Linux AWS instance from Windows

The instructions for connecting to AWS Linux AMI states that when using putty, you should locate the SSH HOST KEY FINGERPRINTS section and note the RSA fingerprint. I am running the "aws ec2 get-...
1
vote
1answer
147 views

SELinux - Script uploaded SSH keys to remote server but cannot connect via SSH

I wrote this script which now works perfectly on systems without SElinux installed. echo Enter server IP: read server scp /home/Zenoss/.ssh/authorized_keys random@$server:/home/random sshpass -p ...
0
votes
2answers
117 views

How to do SSH with -i option and bypassing password entry

Using ssh, I want to access Machine1 --> Machine2 Let's say Machine2 has IP address: 133.165.14.22. I have copied id_rsa.pub from Machine1 to Machine2 Then in Machine2 I have already did this: ...
13
votes
4answers
19k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.