Questions tagged [ssh-keygen]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
31 views

Why can't I authenticate my SSH connection?

I'm writing a bit confused because I've tried everything. Let me know if I'm missing any critical information for you to help me. I'm trying to SSH into my Cyberpower PDU (device probably not ...
5
votes
2answers
1k views

Ubuntu 20.04 ssh-keygen unknown option -G unable to generate Diffie-Hellman parameters

I have noticed that the ssh-keygen for ubuntu 20.04 is missing the options for generating the Diffie-Hellman parameters. This is normally part of SSH hardening. Does anyone know why it has ...
1
vote
1answer
29 views

Using 2 key pairs simultaneously for ssh authentication

I have a ssh server running on a raspberry pi. This ssh server can only be accessed by 1 user on my ubuntu laptop only. I have created 2 pairs of ssh keys using: ssh-keygen -t ed25519 -o -a 100 ssh-...
0
votes
1answer
47 views

Is it okay to use same SSH keypair for different servers, and how not to?

Initially i tried (and failed) to generate a new SSH keypair for a new server. By default it offers to save it into ~/.ssh/id_rsa, which obviously i couldn't, so as to not overwrite my existing key. ...
0
votes
0answers
24 views

Sign ssh host key with openssl instead of ssh-keygen

I currently sign ssh host keys using: ssh-keygen -s key.protected -P mypassphrase -I Foo -n foo.example.com -h -V +7d HostKey ssh_host_rsa_key.pub Now I want to run this on a system where ssh-keygen ...
1
vote
2answers
163 views

EC2: how to download the private key file for a user

I'm only working with terminal in order to create a user on a linux machine (ec2). When creating a new user and then generating an ssh key for this user ssh-keygen -f rsa I do this I then get a rsa....
0
votes
1answer
49 views

How to adequately add identical public-private ssh key to a new client machine?

I have generated private and public key pair files (id_rsa, id_rsa.pub) using ssh-keygen command in a machine A, which is a client. I have tested my connection to server in machine A and it is working ...
1
vote
0answers
1k views

SSH authentication Permission denied (publickey,gssapi-keyex,gssapi-with-mic)

I'm having problem when I try to connect to a remote server using ssh with the following command: ssh -vvv -l user hostname -p XXXX I get the following result: OpenSSH_7.9p1 Debian-10+deb10u1, ...
2
votes
2answers
133 views

how to create status of REMOTE HOST IDENTIFICATION HAS CHANGED when performing ssh to remote machine for testing

We want to cause the status from a remote Linux machine to return "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r", "@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @\r", "@@@...
0
votes
3answers
1k views

What can someone do with your SSH Private Key? [closed]

What exactly can someone do with my Private Key after they used my laptop to create a SSH Public Key? After reading a few websites, it looks like they can access a server pretending they are me when ...
1
vote
1answer
1k views

OpenSSH Windows Server 2016

I am trying to install OpenSSH on a windows server machine. When i use this command: Get-WindowsCapability -Online | ? Name -like 'OpenSSH* I don't get this output: Name : OpenSSH.Client~~~~0.0.1....
1
vote
1answer
141 views

Differing ssh host key in Container-Optimized OS instance

I created a Container-Optimized OS instance in the Google Cloud. When I try to connect to it via ssh from outside the ssh host key fingerprint shown differs from the output of ssh-keygen -lf /etc/ssh/...
2
votes
1answer
58 views

How to setup ssh for a couple of servers?

I'm pretty confused about how ssh really works, and I have already asked a couple of questions related to this, but I suspect I'm going in the XY-problem trap. So, what I want is this. I want to be ...
1
vote
1answer
189 views

How to fetch ssh keys from servers?

I need to login to a host via ssh, get a keyfile, close the connection and then use the key to login without password on several machines. The underlying problem is that I need to perform tests on a ...
1
vote
0answers
125 views

ssh key revocation list and -z version number

I've been reading about setting up an ssh certificate authority and controlling access via key revocation lists. And in the man page, it lists a -z option for specifying a version number for a key ...
4
votes
2answers
2k views

How to verify the private key I have matches AWS keypair?

My AWS instance says it is configured to use the only keypair I have on my account and it has a fingerprint in the format of: 3c:64:a7:85:53:3f:81:1c:24:5a:d2:6a:5b:76:47:da:f3:14:63:88 I have a ...
1
vote
1answer
133 views

Several ed25519 keys with the same prefix

I have created a bunch of ed25519 keys through ssh-keygen to connect to different machines I have access to. However, I noticed that all of them begin with the same, rather long prefix: ...
0
votes
1answer
808 views

find ssh2 key fingerprint

How do I find the ssh fingerprint of a ssh2 key ? With a ssh-1 key I can do ssh-keygen -lf /path/to/keyfile. However when I convert the same key to a ssh2 key using ssh-keygen -e -f keyfile.pub > ...
0
votes
0answers
68 views

SSH copy key from Raspberry Pi to Linux

I am trying to create a new ssh key, and copy it to a server, using a previously generated ssh key. /usr/bin/ssh-copy-id -f -i /home/pi/.ssh/newKey -o "IdentityFile=/home/pi/bob" user@host.edu The ...
0
votes
3answers
90 views

How to have single ssh public-private key pair for a user across different servers?

I am working on standardizing different bits in our environment and as part of that would like to move towards ssh key based authentication. Currently we have individual accounts in each servers (...
0
votes
1answer
503 views

Why is the same private key file generating two different public key strings?

I have an ssh key pair that was generated to use as an access key for my GoCD CI/CD server. It was working but due to some configuration changes I made (moved the server out of container to a Linux ...
0
votes
2answers
114 views

Is SSH-KEYGEN secure, even when client machine gets hack?

Suppose there is Client - Server machine. On the Client machine, we have generated an SSH-KEYGEN and stored the same key on Server Machine. Which means, when Client connects Server using SSH, it won't ...
0
votes
1answer
462 views

my ssh is OK,but mha ssh check is fail

CentOS 6.6 + MySQL MHA(0.56)\ ssh-keygen -t rsa ssh-copy-id -i /root/.ssh/id_rsa.pub root@slave2 and my SSH check is ok [root@master ~]# ssh -v root@slave2 OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb ...
1
vote
1answer
2k views

Changing the ssh passphrase on a private key has no effect

I had a not protected by passphrase ssh key which I use to connect with a server. Now I want to add a passphrase to the key, so I've done: ssh-keygen -p and added a new passphrase: Enter file in ...
7
votes
2answers
9k views

Getting SHA1 Digest of SSH Public Key

It seems like this should be easy. I run "ssh-keygen -l -f " (the default seems to be SHA1). All of the examples show it printing the hex-formatted digest with a little extra, harmless information. ...
84
votes
4answers
22k views

What significance does the user/host at the end of an SSH public key file hold?

I can’t figure out why does an SSH public key file generated by ssh-keygen have a user and host at the end of it. Example: id_rsa.pub ssh-rsa ... rest of file ... /CA9gyE8HRhNMG6ZDwyhPBbDfX root@...
1
vote
1answer
66 views

users to connect SFTP server with openssh key [closed]

I want to be able to allow users to connect to my SFTP server with openssh key which I generated in keygen. How would I accomplish this?
40
votes
5answers
115k views

How to get a .pem file from ssh key pair?

I created a key pair using ssh-keygen and get the two clasic id_rsa and id_rsa.pub. I imported the public key into my AWS EC2 account. Now I created a windows instance and to decrypt that instance ...
1
vote
1answer
838 views

Deleted authorized_keys from EC2 but still have PPK file and I'm connected

I just deleted my full ec2-user/.ssh/ folder and I want to recover the keys so I can access my EC2 server without stopping and starting it. I have on my computer a PPK file that has something like "...
3
votes
2answers
3k views

SSH by key incredibly slow

SSH connecting with key, from my machine suddenly got incredibly slow (~10sec!). It is not a server or DNS problem as far as I can figure out. The problem suddenly appeared after a simple apt-get ...
0
votes
1answer
887 views

ssh-keygen key verification changed in OpenBSD 5.7, how to verify host_key?

OpenBSDs "ssh-keygen -l" output format has changed in 5.7. How to verify the host key when connecting from older ssh versions? Until OpenBSD 5.6 the host_keys fingerprint output format was like this: ...
45
votes
2answers
69k views

Straight forward way to run ssh-agent and ssh-add on login via SSH?

I'm trying to have the following commands be auto-executed when I login to my server via ssh: ssh-agent /bin/bash ssh-add ~/.ssh/id_rsa My ssh key has a passphrase and I'm fine with entering it once ...
0
votes
0answers
53 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
25
votes
4answers
33k views

How do I know if *.pem is password protected using ssh-keygen?

I have got a file myfile-privkey.pem. How do I check if the private key file is password protected using ssh-keygen?
3
votes
1answer
358 views

Best approach to generate and use ssh key pairs

New to ServerFault, but have been on StackOverflow for a few months and loving it. I work on a daily basis on 5 servers I have been setting up for some time now. These servers are all AIX 7.1, and ...
7
votes
1answer
700 views

Verify that an SSH command has not been embedded in a certificate?

From man 8 sshd with regards to the Authorized Keys File Format and the command="command" option: Note that this command may be superseded by either an sshd_config(5) ForceCommand directive or a ...
1
vote
1answer
1k views

SSH access to AWS working with default id_rsa.pub but not with key generated using ssh-keygen

Hi I've never posted a question here but, I'm trying to access an AWS instance without entering a password with the following and having some issues. $ ssh -i ~/.ssh/id_rsa_aws.pub ubuntu@...
0
votes
3answers
1k views

Passwordless SSH is not working, Mac to Linux - need suggestions

I have a server that I regularly log in to. And I have to type my password every time. I'm trying to change this... I've followed the tutorials to the letter. On the server, I used ssh-keygen to ...
1
vote
1answer
285 views

Rsync not working with one server while it does with others using strato hidrive

On a CentOS 6.4 running linux server, I am trying to rsync a folder with strato hidrive (http://www.strato-hosting.co.uk/online-storage-hidrive/advanced/). The server is running rsync version 3.0.9. ...
8
votes
4answers
22k views

Turn off strict checking of ssh keys

Each user creates and destroys 15+ VM's per day. The VM's are created in the company's internal OpenStack cloud. Every time a new vm is assigned an ip address which has previously been handed out, ...
0
votes
1answer
2k views

ubuntu - public-key for authentication

I have a master and slave cluster. I am setting up cloudera manager. On the master I created a passwordless key using the following. ssh-keygen -f id_rsa -t rsa -N '' eval `ssh-agent` ssh-add ~/....
0
votes
3answers
657 views

rsync without password, none of google (server fault) tutorials worked

I need to use rsync for a daily backup operation and in the past (on different servers) I managed to just use a rsa key etc, but now none of google (serverfault) tutorials work at all. It keeps ...
1
vote
5answers
32k views

SSH as root using public key still prompts for password on RHEL 6.1

I've generated rsa keys with cygwin ssh-keygen and copied them to the server with ssh-copy-id -i id_rsa.pub root@my.ip.address I've got the following settings in my /etc/ssh/sshd_config file ...
1
vote
1answer
286 views

Problems with SSH

I'm having issues with one of my computers on my server accepting my key. I've used this key on other computers I've set up before with no problems, I can SSH using it into many different servers. ...
0
votes
2answers
95 views

Remote host making strange request. Am I safe?

I am starting work for an organization on their server. They need to allow connections from my server in order to use GIT over SSH. They asked me to place this in my SSH directory: SHORTNAME=abcdef ...
2
votes
2answers
4k views

Creating SSH key for remote host

I am beginning work with a remote host. They require a "SSH KEY" from my server. How can I create a SSH Key that they can use to allow connections from my server? I would like to assign the key to a ...
42
votes
4answers
18k views

How to get all fingerprints for .ssh/authorized_keys(2) file

Is there a simple way to get a list of all fingerprints entered in the .ssh/authorized_keys || .ssh/authorized_keys2 file? ssh-keygen -l -f .ssh/authorized_keys will only return fingerprint of ...
6
votes
3answers
26k views

ssh login successful, but scp password gives me “Permission denied”

I'm trying to get some blogging software up on an organizational remote server. I tried to set up a SSH Key but was having problems and decided that getting the blog up and running was more important ...
7
votes
1answer
5k views

Choosing the encryption algorithm used by OSX ssh-keygen

I have several users that use SmartCVS on OSX to interact with our CVS repository. We use the cvs :ext: (SSH2) method to access the repository, which is stored on a remote linux system. We use ssh key ...
4
votes
2answers
2k views

Rsync with ssh-keygen to ssh user with limited commands and specifc directory

I have two machines, local and remote. I want to back up my files and folders to the remote machine automatically, using rsync to transfer files and folders, using ssh-keygen to automatically log ...