Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [rsa]

190 questions
3
votes
2 answers

Why does Keychain compain that id_rsa.pub is missing?

I'm reading this article on setting up unattended backups in Duplicity. I'm in the part called 7.2. SSH KeyCaching I've added the following to my root .bash_profile keychain --clear id_rsa . /root/.keychain/www-sh The article states that keychain…
leeand00
  • 4,869
  • 15
  • 69
  • 110
3
votes
3 answers

ssh hostname returns “Bad owner or permissions on ~/.ssh/config” (chmod 600 not working with MingW)

This question is a near duplicate of Robert's question but after trying chmod 600 ~/.ssh/config I still have the same error. I've tried using cygwin and MINGW32 to do the chmod 600. ls -la returns -rw------- on cygwin and returns -rw-r--r-- on…
user29600
  • 419
  • 5
  • 17
  • 30
3
votes
1 answer

Can you make default client key length larger for ssh-keygen?

When users employ ssh-keygen to create RSA key pairs, the default key length is 2048 bits. You can override that on the command line with the -b argument, but few users will bother. As mentioned in this article, it is recommended to use key lengths…
user67327
  • 197
  • 2
  • 8
3
votes
1 answer

Is RSA's SecureID anyless secure in light of the attacks exploiting them?

Additionally, is two-factor authentication in general less secure, and if so, why?
blunders
  • 813
  • 7
  • 14
  • 30
3
votes
1 answer

Fallback authentication if mod_auth_kerb fails

Is there a way for Apache to fall back to a different authentication method if Kerberos authentication (for some reason) fails? The order of the authentication methods should be: Kerberos Active Directory RSA token The RSA token authentication is…
Ian
  • 31
  • 1
  • 2
3
votes
2 answers

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH settings). Right now we're setting our passwords…
Marcus Downing
  • 788
  • 10
  • 18
3
votes
1 answer

Onscreen keyboard with RSA Authentication Agent on WIndows

I'm attempting to integrate a touch panel into our secured environment. As such, the touchpanel requires that the user login via RSA SecurID. Unfortunately, there is no exposed keyboard for the user to type their credentials into the login…
Greg Buehler
  • 1,030
  • 2
  • 10
  • 14
3
votes
2 answers

Ubuntu 9.10 RSA authentication: ssh fails, filezilla runs fine

This is quite a mistery for me. I usually use passwordless RSA authentication to login into my remote *nix servers with ssh and sftp. Never had any problem until now. I cannot connect to an Ubuntu 9.10 machine: user@myclient$ ssh -i…
MariusPontmercy
  • 677
  • 4
  • 15
3
votes
2 answers

Why does my RSA DANE TLSA work, but my ECDSA DANE TLSA fail?

I've purchased two single domain, wildcard SSL certificates from Namecheap/Sectigo/Comodo. I generated my CSRs in the typical fashion using openssl. $ openssl req -newkey rsa:4096 -keyout example.com.rsa.key -out example.com.rsa.csr $ openssl…
synacksoldier
  • 43
  • 4
2
votes
1 answer

Where is cli.ini letsencrypt config file?

Where is the cli.ini file for default letsencrypt package? From Let's Encrypt docs, it's possible to set default rsa key length in a cli.ini file, however, I cannot find this file. I want to make sure that all my certs have the same key size as I…
Jayd
  • 73
  • 1
  • 4
2
votes
1 answer

How EJBCA generate private key

I'm looking for the method used by EJBCA to generate the private keys in general (CA, Sub-Ca, certificates...). Let say for instance you want RSA 2048 key size. Is the generation process all done in EJBCA application ? Do they rely on Java EE-based…
Florent
  • 308
  • 2
  • 7
2
votes
1 answer

How to use DSA key pairs instead of RSA

For testing purposes, I would like to enable DSA authentication on my server (let's name it A). If I remove all the key pairs located under /etc/ssh, both RSA and DSA key pairs are generated on sshd restart. The consequence is that, if I try to open…
dounyy
  • 125
  • 1
  • 6
2
votes
1 answer

OpenVPN ssl VERIFY ERROR: depth=0, error=certificate signature failure in TI am335x-evm platform

I try to porting the openVPN client (2.3.8) to ARMS embedded device. After setting cross compile I was able to run in ARMS, somehow, when I lanuch the openvpn in ARMS, it show error : VERIFY ERROR: depth=0, error=certificate signature, Below are…
James Chien
  • 121
  • 1
  • 4
2
votes
1 answer

Public key authentication with strongswan

I have two systems r1 and r2, and I want to establish an ESP tunnel between them with Strongswan using public key authentication. I have generated public keys, store in r1-pub.pem and r2-pub.pem respectively, in both the systems using openssl. Now…
Soumen
  • 123
  • 1
  • 5
2
votes
5 answers

Are RSA keys needed for LAN only setups?

I have an SSH installed on my Ubuntu server. I can log into it from my Ubuntu desktop, using a user and a password. I can only access SSH from my LAN, since the SSH port is not forwarded on my router. Do I need to set up an RSA key for a setup like…
Cory Walker
  • 236
  • 2
  • 4
  • 11
1 2 3
…
12 13