Questions tagged [rsa]
The rsa tag has no usage guidance.
193
questions
0
votes
0
answers
28
views
I'm getting on gitbash a warning WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! for github [migrated]
When I try to clone a git repository in gitbash on Windows I get following error:
$ ssh -T [email protected]
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST ...
- 4,514
147
votes
35
answers
572k
views
SSH Suddenly returning Invalid format
So a while ago I set up a server on AWS, and used their generated SSH key. I saved the key to Lastpass, and have successfully retrieved it from there before, and got it working. However, after trying ...
- 215
558
votes
33
answers
1.2m
views
How do I tell Git for Windows where to find my private RSA key?
My Git setup runs fine on Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private SSH key (or, better still, how to tell ssh ...
- 429
0
votes
1
answer
72
views
SSH key fingerprint not matching after server hack (Bluehost Wordpress). How to identify issue? [duplicate]
Detected a hack from this morning on a Bluehost server Wordpress installation. Someone used credentials from a Wordpress user account with admin rights, I'm dealing with the aftermath now. I know, I ...
0
votes
1
answer
500
views
userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms after upgrade of OpenSSH
After an upgrade I can no longer log in to my box (FreeBSD 14.0) using RSA key getting:
userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms
in /var/logs/auth.log
on every ...
- 111
0
votes
1
answer
4k
views
What ciphers do I need to disable in tomcat to match a specific apache conf?
I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf.
I am actually running tomcat, and in my ...
CommunityBot
- 1
47
votes
9
answers
120k
views
Auto accept rsa key fingerprint from command line
I've tried yes | ssh [email protected] to try to accept the RSA key fingerprint, but am still prompted if I'm sure I want to connect. Is there a way to make this automatic?
- 309
1
vote
1
answer
568
views
How to disable certain user rsa certificate in OpenVPN?
Suppose we create certificates for OpenVPN using easy-rsa. And we have two clients - client1 and client2 with their certificates etc. Suppose that some time later we need to disable client2 ...
- 364
2
votes
4
answers
8k
views
setting minimum size of accepted rsa key
Is there a way to set the minimum size accepted by sshd as an RSA public key?
I want to restrict users to using RSA keys that are generated with ssh-keygen -b 8196 or greater.
I didn't see any ...
- 116
0
votes
1
answer
46
views
Old TLS or RSA version on Wifi Antenna preventing maintenance
First I'll disclose that I'm not a professional in networking by any means. That being said, I manage my family's home/small businness network. We have a few buildings, with the modem being in the ...
- 9,783
74
votes
6
answers
231k
views
How to remove strict RSA key checking in SSH and what's the problem here?
I have a Linux server that whenever I connect it shows me the message that changed the SSH host key:
$ ssh root@host1
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: ...
22
votes
4
answers
26k
views
How do I import a RSA SSH key into GPG as the _primary_ private key?
I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
- 150
0
votes
1
answer
46
views
Github Deploy Key Pattern
My Deployment Pattern
I have a setup as shown in the diagram above, where have a github account which owns a number of private repositories. I have a number of machines in the field that each include ...
github
7
votes
3
answers
40k
views
SSH No Matching Host Key Type Found
I have two servers,
S1: My machine, Windows 8, OpenSSH 8.8p1, OpenSSL 1.1.11 2021-08-24,
S2: A Remote Server, Linux, Open SSH 5.3p1, OpenSSL 1.0.1e-fips 2013-02-11.
The message I have trying to ...
- 111
0
votes
1
answer
69
views
Which key is used for signed exchange certificate?
I was trying to generate a Signed Exchange Certificate from Google CA followed by this documentation https://cloud.google.com/certificate-manager/docs/public-ca-tutorial
But now facing this error :
&...
google-cloud-platform
3
votes
2
answers
742
views
Why does my RSA DANE TLSA work, but my ECDSA DANE TLSA fail?
I've purchased two single domain, wildcard SSL certificates from Namecheap/Sectigo/Comodo. I generated my CSRs in the typical fashion using openssl.
$ openssl req -newkey rsa:4096 -keyout example.com....
- 334
159
votes
5
answers
354k
views
How to check if an RSA public / private key pair match
I have two files, id_rsa and id_rsa.pub. What command can be used to validate if they are a valid pair?
- 111
0
votes
2
answers
3k
views
Copy the rsa keys from one machine to another
Someone asked me to provide my public id_rsa key to make be able to connect to their server via ssh. I did so and it's working fine. I want to do that from my another laptop as well without having to ...
CommunityBot
- 1
0
votes
1
answer
628
views
Check bit length of ssl certificates for both, RSA and elliptic curves
We're using a script based on acme.sh to generate our SSL certificates. acme.sh also supports elliptic curves. I wonder, how to check the keylength for both, RSA and elliptic curve certificates. I ...
- 445
18
votes
5
answers
24k
views
Using PGP keys for SSH
I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
- 1
0
votes
1
answer
6k
views
SSH access denied for one user
I encounter an error while trying to connect via SSH to a server, for one user.
This user's home directory is in /opt, with a .ssh directory (permissions: 700) and an authorized_keys file containing ...
7
votes
2
answers
26k
views
Unable to login(ssh) with public private key pair
I am unable to login with public private key pairs. I do have access with a password. Following are the logs on server side and on the client side. Why am I unable to login?
type=CRYPTO_KEY_USER msg=...
- 11
11
votes
1
answer
16k
views
SSH keys: ed25519 vs RSA performance demystified
It is claimed that ed25519 keys are better than RSA, in terms of security and performance. In terms of security, I understand that 4096 bits RSA keys are practically unbreakable for the foreseable ...
- 233
1
vote
0
answers
3k
views
Public key for /etc/ssh/whatever does not match private key - but it does
When I start my ssh service (on a Devuan Chimaera Linux box), I get the warnings:
Public key for /etc/ssh/ssh_host_rsa_key does not match private key
Public key for /etc/ssh/ssh_host_ecdsa_key does ...
- 1,722
4
votes
1
answer
2k
views
How to validate opendkim generated RSA keys
I'm trying to diagnose OpenDKIM validation errors (see this question). Way down in the belly of the beast, I'm at the point where I'm trying to make sure the keys generated are actually correct.
I'm ...
- 4,789
1
vote
3
answers
2k
views
Error when install SSL certificate on MediaTemple GS server
Here is what happened:
I generate the CSR via the MediaTemple site (that is the only way to do it. since a GS is a share server). Send it over the namecheap.com (its signed by RapidSSL).
When I got ...
0
votes
1
answer
2k
views
Ubuntu Key Exchange Algo
I am trying to test the connectivity to several network devices, with Ansible installed on Ubuntu 20.04.2 LTS, using ansible ad-hoc.
The problem:
SSH is not working as the device's key exchange method ...
- 782
0
votes
1
answer
383
views
Programmatic way to get host key fingerprint from AWS EC2
Is there a programmatic way to get the host key fingerprint from AWS EC2.
I feel like this is so basic someone must have figured it out, but I can't find anything.
- 70
8
votes
5
answers
30k
views
Recover an SSH private key?
I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
0
votes
1
answer
615
views
What is the best method for adding RSA Key Fingerprints to known_hosts upon provisioning each server?
This question was inspired by this thread
The hypothetical scenario, for context is as follows:
SSH servers, whether they be routers, firewalls etc. are all firstly provisioned within a private + ...
- 248k
1
vote
0
answers
2k
views
Why PuTTY doesn't accept SSH key exchange RSA algorithm
Summary:
I am trying to set SSH key exchange algorithm to RSA with no luck.
The session is between my Windows machine with PuTTY as client to a Linux machine in Amazon EC2.
Description:
I configured ...
- 111
1
vote
0
answers
302
views
ssh with public key at Synology - not working
I guess I have done everything right. Public/private keys, files permissions, etc.
There are 3 machines:
ubuntu
old_synology
new_synology
I start from ubuntu, ssh to old_synology without a password. ...
- 123
2
votes
4
answers
5k
views
Windows SSH into CentOS using Private Key - Not working
I'm on Windows 10. Need to ssh into a Linux CentOS server. Trying both Putty and Windows SSH (turned on in Features.. Powershell?).
Using PuttyGen, I generated a private & public RSA key pair - ...
CommunityBot
- 1
1
vote
2
answers
94
views
I have an issue with configuring openvpn server and running it
Server Log
Options error: Unrecognized option or missing or extra parameter(s) in server.ovpn:4: cert (2.4.9) Use --help for more information.
server configuration
server 192.168.1.0 255.255.255.0
...
3
votes
2
answers
5k
views
Why does Keychain compain that id_rsa.pub is missing?
I'm reading this article on setting up unattended backups in Duplicity.
I'm in the part called 7.2. SSH KeyCaching
I've added the following to my root .bash_profile
keychain --clear id_rsa
. /root/...
- 4,667
0
votes
0
answers
279
views
Issues with seamless ssh connect via public key
I am trying to set up a seamless ssh connection from one server to another for the first time. While I think I managed to create a user and fitting rsa keys just fine, I can't actually connect via ssh,...
- 101
0
votes
2
answers
419
views
OpenVPN,EasyRSA :system was unable to find the specified registry key or value
I've installed (as Admin) latest version of OpenVPN (2.4.7-I603) on Windows 2012 x64. I've checked on installer EasyRSA 2. Then trying to generate the certificate go in path ..\program files\OpenVPN\...
- 101
20
votes
11
answers
44k
views
OpenVPN easy-rsa build-key automation?
I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this:
./build-key client1
There is some output with a series of questions. The questions ...
- 1
0
votes
1
answer
133
views
I recovered my RSA key, but I'm locked out of my webserver
So when I built my unmanaged webserver for my portfolio site jasonwarner.dev I had initially locked it down by disabling any login and the root account, completely because I was getting notifications ...
- 21
6
votes
1
answer
22k
views
How to convert DER formatted public key file to PEM form
I need to use the PEM formatted public key for some purpose, but not finding the command which can convert DER formatted public key to PEM formatted public key.
The command I have used -
openssl ...
- 1
0
votes
1
answer
783
views
How to install custom SSL (HTTPS) certificate in RSA NetWitness web UI (11.3.1.1)
RSA NetWitness's web user interface (11.3.1.1) comes with self-signed cert that isn't trusted in my enterprise. How can I install a custom SSL certificate on the web user interface so that users aren'...
- 129
0
votes
1
answer
194
views
Passwordless sshing troubles
I've tried setting up passwordless sshing for a MPI cluster im working on. Im generating the RSA key on the master node and sending the public key to my client node. It sends but refuses to connect ...
- 36
1
vote
1
answer
4k
views
Host ssh-rsa key is refused by WinSCP when connecting on scheduled task, but not when launched manually
As part of a scheduled task that runs on a Windows Server 2012 machine, I use WinSCP to connect via sFTP using credentials and ssh-rsa key. When the scheduled task runs, the connection fails with the ...
- 7,950
10
votes
10
answers
39k
views
sshd shuts down with "No supported key exchange algorithms" error
sshd
$ /usr/sbin/sshd -f testconfig -p 22025 -d
debug1: sshd version OpenSSH_5.2p1
debug1: private host key: #0 type 0 RSA1
debug1: read PEM private key done: type RSA
debug1: private host key: #1 ...
- 101
18
votes
7
answers
49k
views
SSH connection asks for password although key is accepted
I'm getting prompted for a password even though it looks like my SSH key is accepted. As far as I can tell, the line "Server accepts key: pkalg ssh-rsa blen 277" in the logs below mean my key is ...
- 1
1
vote
1
answer
3k
views
500 OOPS: SSL: cannot load RSA private key
I am trying to debug a FTP server. I am currently getting
$ sudo /usr/sbin/vsftpd
500 OOPS: SSL: cannot load RSA private key
FTP connections are being refused. This is that status of from systemctl:
...
- 863
1
vote
4
answers
9k
views
Passwordless root SSH on CentOS 6 with public key
I am trying to create a "passwordless" setup so that the remote server is more secure without password + I can automate the login process.
I have created a new ssh key with ssh-keygen, and copied the ...
- 227
0
votes
3
answers
7k
views
Generating a CSR fails with 'routines:RSA_sign:digest too big for rsa' - for heroku
I tried generating a CSR by following Heroku instructions. Specifically
openssl genrsa -des3 -out server.pass.key 2048
openssl rsa -in server.pass.key -out server.key
openssl req -nodes -new -key ...
- 101
4
votes
4
answers
19k
views
SSH login without password
I know that you can use ssh-keygen to generate a public/private key pair. Then you can install the public key on a remote server. You can then login without supplying a password. I haven't been ...
12
votes
2
answers
68k
views
Cannot decrypt private key eventhough I know passphrase
I think my problem comes down to the fact something is wrong with the key but I cannot just decrypt it, for further investigation, with out parsing it. But I am not sure.
I am trying to use standard ...
- 1