Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssh-keygen]

The tag has no usage guidance.

0
votes
0answers
38 views

ssh key revocation list and -z version number

I've been reading about setting up an ssh certificate authority and controlling access via key revocation lists. And in the man page, it lists a -z option for specifying a version number for a key ...
3
votes
2answers
550 views

How to verify the private key I have matches AWS keypair?

My AWS instance says it is configured to use the only keypair I have on my account and it has a fingerprint in the format of: 3c:64:a7:85:53:3f:81:1c:24:5a:d2:6a:5b:76:47:da:f3:14:63:88 I have a ...
1
vote
1answer
34 views

Several ed25519 keys with the same prefix

I have created a bunch of ed25519 keys through ssh-keygen to connect to different machines I have access to. However, I noticed that all of them begin with the same, rather long prefix: ...
0
votes
1answer
342 views

find ssh2 key fingerprint

How do I find the ssh fingerprint of a ssh2 key ? With a ssh-1 key I can do ssh-keygen -lf /path/to/keyfile. However when I convert the same key to a ssh2 key using ssh-keygen -e -f keyfile.pub > ...
0
votes
0answers
51 views

SSH copy key from Raspberry Pi to Linux

I am trying to create a new ssh key, and copy it to a server, using a previously generated ssh key. /usr/bin/ssh-copy-id -f -i /home/pi/.ssh/newKey -o "IdentityFile=/home/pi/bob" user@host.edu The ...
0
votes
3answers
67 views

How to have single ssh public-private key pair for a user across different servers?

I am working on standardizing different bits in our environment and as part of that would like to move towards ssh key based authentication. Currently we have individual accounts in each servers (...
0
votes
1answer
159 views

Why is the same private key file generating two different public key strings?

I have an ssh key pair that was generated to use as an access key for my GoCD CI/CD server. It was working but due to some configuration changes I made (moved the server out of container to a Linux ...
0
votes
2answers
71 views

Is SSH-KEYGEN secure, even when client machine gets hack?

Suppose there is Client - Server machine. On the Client machine, we have generated an SSH-KEYGEN and stored the same key on Server Machine. Which means, when Client connects Server using SSH, it won't ...
0
votes
1answer
349 views

my ssh is OK,but mha ssh check is fail

CentOS 6.6 + MySQL MHA(0.56)\ ssh-keygen -t rsa ssh-copy-id -i /root/.ssh/id_rsa.pub root@slave2 and my SSH check is ok [root@master ~]# ssh -v root@slave2 OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb ...
1
vote
1answer
662 views

Changing the ssh passphrase on a private key has no effect

I had a not protected by passphrase ssh key which I use to connect with a server. Now I want to add a passphrase to the key, so I've done: ssh-keygen -p and added a new passphrase: Enter file in ...
5
votes
2answers
6k views

Getting SHA1 Digest of SSH Public Key

It seems like this should be easy. I run "ssh-keygen -l -f " (the default seems to be SHA1). All of the examples show it printing the hex-formatted digest with a little extra, harmless information. ...
61
votes
4answers
11k views

What significance does the user/host at the end of an SSH public key file hold?

I can’t figure out why does an SSH public key file generated by ssh-keygen have a user and host at the end of it. Example: id_rsa.pub ssh-rsa ... rest of file ... /CA9gyE8HRhNMG6ZDwyhPBbDfX root@...
1
vote
1answer
56 views

users to connect SFTP server with openssh key [closed]

I want to be able to allow users to connect to my SFTP server with openssh key which I generated in keygen. How would I accomplish this?
19
votes
4answers
60k views

How to get a .pem file from ssh key pair?

I created a key pair using ssh-keygen and get the two clasic id_rsa and id_rsa.pub. I imported the public key into my AWS EC2 account. Now I created a windows instance and to decrypt that instance ...
0
votes
1answer
628 views

Deleted authorized_keys from EC2 but still have PPK file and I'm connected

I just deleted my full ec2-user/.ssh/ folder and I want to recover the keys so I can access my EC2 server without stopping and starting it. I have on my computer a PPK file that has something like "...
3
votes
2answers
2k views

SSH by key incredibly slow

SSH connecting with key, from my machine suddenly got incredibly slow (~10sec!). It is not a server or DNS problem as far as I can figure out. The problem suddenly appeared after a simple apt-get ...
0
votes
1answer
820 views

ssh-keygen key verification changed in OpenBSD 5.7, how to verify host_key?

OpenBSDs "ssh-keygen -l" output format has changed in 5.7. How to verify the host key when connecting from older ssh versions? Until OpenBSD 5.6 the host_keys fingerprint output format was like this: ...
31
votes
2answers
51k views

Straight forward way to run ssh-agent and ssh-add on login via SSH?

I'm trying to have the following commands be auto-executed when I login to my server via ssh: ssh-agent /bin/bash ssh-add ~/.ssh/id_rsa My ssh key has a passphrase and I'm fine with entering it once ...
0
votes
0answers
51 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
22
votes
4answers
26k views

How do I know if *.pem is password protected using ssh-keygen?

I have got a file myfile-privkey.pem. How do I check if the private key file is password protected using ssh-keygen?
3
votes
1answer
331 views

Best approach to generate and use ssh key pairs

New to ServerFault, but have been on StackOverflow for a few months and loving it. I work on a daily basis on 5 servers I have been setting up for some time now. These servers are all AIX 7.1, and ...
7
votes
1answer
573 views

Verify that an SSH command has not been embedded in a certificate?

From man 8 sshd with regards to the Authorized Keys File Format and the command="command" option: Note that this command may be superseded by either an sshd_config(5) ForceCommand directive or a ...
1
vote
1answer
1k views

SSH access to AWS working with default id_rsa.pub but not with key generated using ssh-keygen

Hi I've never posted a question here but, I'm trying to access an AWS instance without entering a password with the following and having some issues. $ ssh -i ~/.ssh/id_rsa_aws.pub ubuntu@...
0
votes
3answers
1k views

Passwordless SSH is not working, Mac to Linux - need suggestions

I have a server that I regularly log in to. And I have to type my password every time. I'm trying to change this... I've followed the tutorials to the letter. On the server, I used ssh-keygen to ...
1
vote
1answer
272 views

Rsync not working with one server while it does with others using strato hidrive

On a CentOS 6.4 running linux server, I am trying to rsync a folder with strato hidrive (http://www.strato-hosting.co.uk/online-storage-hidrive/advanced/). The server is running rsync version 3.0.9. ...
7
votes
4answers
17k views

Turn off strict checking of ssh keys

Each user creates and destroys 15+ VM's per day. The VM's are created in the company's internal OpenStack cloud. Every time a new vm is assigned an ip address which has previously been handed out, ...
0
votes
1answer
2k views

ubuntu - public-key for authentication

I have a master and slave cluster. I am setting up cloudera manager. On the master I created a passwordless key using the following. ssh-keygen -f id_rsa -t rsa -N '' eval `ssh-agent` ssh-add ~/....
0
votes
3answers
634 views

rsync without password, none of google (server fault) tutorials worked

I need to use rsync for a daily backup operation and in the past (on different servers) I managed to just use a rsa key etc, but now none of google (serverfault) tutorials work at all. It keeps ...
1
vote
5answers
31k views

SSH as root using public key still prompts for password on RHEL 6.1

I've generated rsa keys with cygwin ssh-keygen and copied them to the server with ssh-copy-id -i id_rsa.pub root@my.ip.address I've got the following settings in my /etc/ssh/sshd_config file ...
1
vote
1answer
214 views

Problems with SSH

I'm having issues with one of my computers on my server accepting my key. I've used this key on other computers I've set up before with no problems, I can SSH using it into many different servers. ...
0
votes
2answers
95 views

Remote host making strange request. Am I safe?

I am starting work for an organization on their server. They need to allow connections from my server in order to use GIT over SSH. They asked me to place this in my SSH directory: SHORTNAME=abcdef ...
2
votes
2answers
3k views

Creating SSH key for remote host

I am beginning work with a remote host. They require a "SSH KEY" from my server. How can I create a SSH Key that they can use to allow connections from my server? I would like to assign the key to a ...
35
votes
3answers
15k views

How to get all fingerprints for .ssh/authorized_keys(2) file

Is there a simple way to get a list of all fingerprints entered in the .ssh/authorized_keys || .ssh/authorized_keys2 file? ssh-keygen -l -f .ssh/authorized_keys will only return fingerprint of ...
5
votes
3answers
21k views

ssh login successful, but scp password gives me “Permission denied”

I'm trying to get some blogging software up on an organizational remote server. I tried to set up a SSH Key but was having problems and decided that getting the blog up and running was more important ...
7
votes
1answer
4k views

Choosing the encryption algorithm used by OSX ssh-keygen

I have several users that use SmartCVS on OSX to interact with our CVS repository. We use the cvs :ext: (SSH2) method to access the repository, which is stored on a remote linux system. We use ssh key ...
4
votes
2answers
2k views

Rsync with ssh-keygen to ssh user with limited commands and specifc directory

I have two machines, local and remote. I want to back up my files and folders to the remote machine automatically, using rsync to transfer files and folders, using ssh-keygen to automatically log ...
1
vote
1answer
1k views

rsync from Drobo to Drobo

I'd like to run a backup rsync job from one Drobo to another. I've managed to get rsync and the ssh tools installed so that I can ssh from my desktop into backup@drobo1.local and then ssh into backup@...
8
votes
2answers
2k views

SSH keys: why is id_rsa larger than id_rsa.pub?

My private key (~/.ssh/id_rsa) is a 1766-byte file, but my public key (~/.ssh/id_rsa.pub) is only 396 bytes in length. Why the massive difference? Is it because the private key is encrypted using AES? ...
3
votes
2answers
1k views

When are root's SSH keys generated?

I have hosts with and without keys in /root/.ssh. I've noticed before some on screen feedback for SSH key generation on start up (first time.) But I am not sure what the catalyst is. I have looked ...
0
votes
4answers
1k views

ssh-keygen problem

I have configured the ssh-key using keygen for password less authenticaton as from the following link http://rcsg-gsir.imsb-dsgi.nrc-cnrc.gc.ca/documents/internet/node31.html nO matter what i do this ...
2
votes
3answers
636 views

How do you manage ssh keys to add a second user?

I used this article to set up keys and a user to login to a Ubuntu server from a Windows box using Putty. I would now like to add an additional ssh user that will login from a MacBook. I used ssh-...
9
votes
3answers
1k views

RSA or DSA: What's the definitive answer when generating SSH key pairs? [duplicate]

Possible Duplicate: SSH keypair generation: RSA or DSA? Some say use RSA, some say use DSA, some say it doesn't matter. Some say one is more secure than the other, some say the reverse. Some ...
245
votes
2answers
161k views

How do I change my private key passphrase?

I have an existing public/private key pair. The private key is password protected, and the encryption may be either RSA or DSA. These keys are the kind you generate with ssh-keygen and generally store ...