Questions tagged [ssh-keys]

an authorization mechanism for SSH involving public-key cryptography.

SSH keys are an authorization mechanism for SSH involving public-key cryptography. It consists of

  • A private/public key pair generated by a utility like ssh-keygen.
  • A configured (in /etc/ssh/sshd_config) SSH daemon that allows public key authentication.
  • A configured user account that has the public key copied to ~/.ssh/authorized_keys.
792 questions
5
votes
1 answer

How to give temporary access with SSH using certificate authority?

I am trying to work on providing temporary access with SSH using certificate authority on aws EC2 instance, but not able to do it properly. Can you please help give guidance on how can this be acheived? Process followed mentioned below: Step 1:…
5
votes
1 answer

Working example of multiple permitopen options in authorized_keys

I have a working key in .ssh/authorized_keys with a single permitopen option configured. I went to add an additional permitopen and it does not allow tunnels to the new server. The documentation says: Multiple PermitOpen options may be applied to…
Shawn McGough
  • 511
  • 6
  • 9
5
votes
3 answers

Creating SSH keys

I'm new to this so I hope I don't ask nonsense. I want to send an SSH command to a remote server without password. On the local machine we have multiple users. On the remote machine there is only one user, so I have to connect with…
Elad Weiss
  • 179
  • 6
5
votes
1 answer

Git: expire ssh keys just like passwords expire?

I'm setting up git in a corporate environment. Git operations will be primarily though SSH using a single account with SSH keys used for access control. (http will be used for account configuration, web-based code browsing but little else.) But the…
Mort
  • 166
  • 1
  • 5
5
votes
2 answers

How to change SSH key on Google Cloud?

I need to replace the existing SSH key with a new one, but I don't see such options in Cloud admin panel. What is the right way to do this?
5
votes
2 answers

AWS connection error: Permission denied (publickey)

Sorry if this sounds redundant to you but trust me its not. I have tried almost majority of the links related to this problem but nothing is working for me so far. I even tried this article two. Below is what I have tried so far Permission of the…
5
votes
1 answer

One Unix account for several users on GitHub, how does it work?

When we create a repository on GitHub, we can always access it with the address "git@github.com:user/repo" but how does it work behind the scene? ...I mean, there is only one Unix account: "git" while several users use it with different keys and…
hl037_
  • 267
  • 2
  • 10
5
votes
2 answers

hg pull from Bitbucket fails when run from cron

I have a local copy of a Bitbucket repo on one of my servers (under the user rob), and I created a script that runs every hour in cron and attempts to pull & update the local copy. The issue I'm having is that hg pull fails, even though when I…
robjohncox
  • 1,045
  • 1
  • 8
  • 7
5
votes
3 answers

Is there an easier way to add public-key authentication for new users?

I am in the arduous and painful process of setting up secure users on a new web LEMP server with Ubuntu 12.04. I was initially going to setup something like vsftpd or proftpd but many have suggested just to use SFTP directly so I will. Ultimately,…
JM4
  • 1,144
  • 3
  • 18
  • 29
5
votes
2 answers

How long does a PuTTY keyphrase need to be (i.e. how does PuTTY encrypt private keys)

I'd like to know what a good minimum password length for a PuTTY passphrase is. This depends on the amount of entropy the passphrase needs to have, which in turn depends on the length one attempt takes, which in turn depends on the algorithm used…
Eamon Nerbonne
  • 326
  • 2
  • 5
5
votes
2 answers

Theoretical situation regarding lost ssh keys

This has not happened to me, yet. But let's assume the following scenario: I copy my public key to the server, and then disable password authentication for ssh. Then, for some unknown reason, the public key on the server gets corrupted, and I can…
jshawl
  • 297
  • 2
  • 13
5
votes
1 answer

Manage ssh_known_hosts with puppet

I'm new to Puppet (open source version) and have a relatively straightforward question. When I bring up a new host, I'd like the puppetmaster to add the new host's public rsa key to /etc/ssh/ssh_known_hosts, and so the updated ssh_known_hosts file…
Banjer
  • 3,974
  • 12
  • 41
  • 47
5
votes
2 answers

show my public ssh keys, a good idea?

If I have many public ssh keys. Is a good idea show all of my public keys in web page? maybe a gist or similar . EDIT my problem is : when I create a new server, I have to manually copy the keys.
JuanPablo
  • 913
  • 3
  • 10
  • 21
5
votes
5 answers

How do I configure sshd on Debian to use Public Key Authentication?

I'm working on a (Debian) Dreamhost VPS, and it seems to want password-based authentication only: adding my RSA and DSA public keys to ~/.ssh/authorized_keys did not change the behavior of requiring a password to log in. How can set the server up so…
Christos Hayward
  • 1,162
  • 3
  • 16
  • 35
5
votes
4 answers

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / password logins for SSH? Don't get me wrong,…
Dougal
  • 61
  • 2