The tag has no usage guidance.

learn more… | top users | synonyms

82
votes
5answers
35k views

Is it ok to share private key file between multiple computers/services?

So we all know how to use public key/private keys using SSH, etc. But what's the best way to use/reuse them? Should I keep them in a safe place forever? I mean, I needed a pair of keys for accessing ...
38
votes
3answers
17k views

Are GPG and SSH keys interchangable?

I want to generate an RSA key in GPG and use it in SSH login. Is this even possible? If so, how?
16
votes
5answers
27k views

public key always asking for password and keyphrase

I am trying to SSH from a NAS to a webserver using a public key. NAS user is 'root' and webserver user is 'backup' I have all permissions set correctly and when I debug the SSH connection I get: (...
11
votes
3answers
2k views

Human-readable dump of gpg public key

Is there some tool to write out the actual content of a GnuPG public key in a way a human can unserstand? I mean not only ascii-armor which a human can read and type, but something which really breaks ...
11
votes
1answer
10k views

Problem using git on Windows 7 with msysgit and .ssh keys

I'm using git on my Ubuntu machine with my existing ssh keys. Now I have to use Git on Windows 7, and need to use the same keypairs. I have set up msysgit and created an .ssh folder in Users\username\...
10
votes
4answers
29k views

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv 7F0CEB10 command returns error

I'm trying to install Mongodb on Ubuntu 12 but when I run this command: sudo apt-key adv --keyserver keyserver.ubuntu.com --recv 7F0CEB10 This returned the error below: keyserver.ubuntu.com host ...
9
votes
1answer
2k views

How safe is it to make my SSH Public key, very public?

Is it a security risk to allow anyone to see your SSH public key? My public key(s) are on all the machines I login to regularly, and I've also given other sysadmins my .pub file so they allow me ...
9
votes
1answer
3k views

In Keychain Access on OS X, Find matching public and private keys

I have a couple keys that seem to have been generated with the same names. I would like to know which public key match up with which private keys so I can rename/delete them. Is this something that is ...
8
votes
1answer
2k views

How can I add my picture to my public key using GnuPG?

I've created a key pair using GnuPG. I've read that in addition to multiple identities and email addresses, one can also embed a small image (most usually of the user) to help perhaps with memory ...
8
votes
4answers
12k views

Can't import public key into OSX Keychain

I created a couple of self-signed S/MIME certificates (using OSX Keychain & OpenSSL) and then exported these into 3 files: Certificate (.cer) Private Key (.p12) Public Key (.pem) When ...
7
votes
2answers
1k views

Isn't it dangerous to use SSH keys to login to an unknown/compromised server?

Say I provide someone with my public SSH key, the id_rsa.pub and he/she installs it on a server that is compromised, and I am asked to login. Does the login process involve sending my private key to ...
7
votes
4answers
5k views

Secure remote editing of root-accessible files over SSH

As per security best practices one should not allow root login over SSH with password or keys. Instead, sudo should be used. However, if one wants to use SSH (SFTP) for remote editing of server ...
6
votes
1answer
869 views

How can I export public key in PEM format with GnuPG?

I'm writing SW that uses opessl library for verifying DSA signatures. I have public keys from senders in gpg format. How can I convert those into .pem so that openssl can read them? I found this from ...
5
votes
4answers
1k views

SSH asks for password, even with public key installed [duplicate]

Possible Duplicate: Problem with shared ssh keys I have set up pub key authentication between two servers. Everything should work, but I am still asked for the password. Here's parts of my ...
5
votes
2answers
14k views

No supported authentication methods available in FileZilla

I'm using FileZilla to connect to my SFTP server. But when I'm trying to connect, it gives me this error Error: Disconnected: No supported authentication methods available (server sent: ...
4
votes
3answers
12k views

SSH keeps requesting my password if I use a keyfile other than default

I have a keyfile named KEY, which has KEY and KEY.pub. I upload the pub to authorized_keys, and add the private with ssh-add /home/user/.ssh/KEY But when I try to connect with ssh user@host.com, ...
4
votes
2answers
2k views

SSH: known host with dynamic address

I need to connect to a host with a dynamic IP address. Every time its IP changes, SSH prompts me the fingerprint validation thing: The authenticity of host '...' can't be established. RSA key ...
4
votes
1answer
4k views

How can I export public keys in PEM format with GnuPG?

I know that gpg --export -o pub.key -a "Username" exports a users' public key, but it doesn't seem to write a standard PEM format block. Is there any way to export keys from gpg in PEM format?
4
votes
1answer
4k views

How to setup ssh, key-based (“password-less”) logins to a Linux/MacOSX sshd server via Windows, Linux, or MacOSX clients?

How does one setup ssh, key-based ("password-less") client logins to a Linux/MacOSX sshd server via Windows, Linux, or MacOSX clients? [Seeking both basic, conceptual understanding of key-based, ssh/...
4
votes
1answer
3k views

Setting up sshd_config in cygwin for AES encrypted file transfer

I'm a bit newer to cygwin and sshd, and I want to configure sshd to allow encrypted SFTP file transferring. From what I understand, I need to find some sort of sshd_config example (which for some ...
4
votes
2answers
1k views

SSH Public RSA key fails to authenticated after restore

I just put a new hard drive in my computer and restored my id_rsa key from a backup I had. However, when I try to connect to SSH, OSX is asking for a password. I didn't set a password when I created ...
4
votes
2answers
11k views

What is the difference between the .pem and .pub and non suffixed ssh credentials files?

Running "ssh-keygen -t dsa" generates two files, a private and public key. Its simple enough to comprehend that the private key is used to identify yourself to the outside world, which only sees your ...
4
votes
1answer
1k views

Public key repository - does this exist?

This is one of those "Surely this already exists, and if not, I damn well better build it!" moments. Here's my problem: I run a devteam, of around 10 individuals. Each of us has our own private key(s)...
3
votes
1answer
1k views

How to ASCII-armor my public key without installing GPG?

I would like to upload my public key to a key server, but I already have my key infrastructure in place without GPG and I don't want to install extra software I don't need. Is there an easy way to ...
3
votes
3answers
15k views

SSH publickey autentication - server accepts key but auth does not succeed

I'm helping a friend who has some trouble connecting using public-key authentication, to a server maintainied by me. Public-key auth works fine for a couple of other users. Of course, my friend's ...
3
votes
2answers
12k views

Authenticating and adding public key for apt

I was trying to get the official mongodb for Ubuntu, following the instructions at http://www.mongodb.org/display/DOCS/Ubuntu+and+Debian+packages After adding the deb http://downloads-distro.mongodb....
3
votes
2answers
128 views

How is encryption handled when different email clients send emails securely?

Whose public key is used to encrypt email from me@myemailservice.com to you@youremailservice.com? My email client can't have the public key of every person in the world I could possibly write an email ...
3
votes
1answer
231 views

How GPG generates an MD5 fingerprint given a public key?

I have the following GPG public key stored inside a file called publickey.pub and encoded in ASCII Armor (Radix-64): -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3ia mQCNAzNko/QAAAEEANZ2kpN/...
3
votes
2answers
671 views

GnuPG / OpenGPG: Recovering public key from private key

I know that the public SSH key can be recovered from the private using ssh-keygen -y. How can a (deleted) public key be recovered from the private key in GPG (preferably in a way that is OpenGPG ...
3
votes
3answers
4k views

ssh-copy-id and duplicates in authorized_keys

I want to type password only once when connecting to SSH so I use ssh-copy-id and install my pubkey into authorized keys. But I don't keep track which servers already have my key and which does not, ...
3
votes
1answer
69 views

How to generate the revocation certificate after being made a revoker with GnuPG

I read the "How should GnuPG's `--desig-revoke` command be used?" question/answer, so now I know when to use the --desig-revoke. So, I have two different private keys -- one at work (WORKWORK), ...
3
votes
2answers
292 views

Fetch GPG public keys for thunderbird address book contacts

I just started using GPG in Thunderbird 17 (via enigmail). Now I want to fill my private key database with all the keys of other people that use mail encryption as well. One way, other than asking ...
2
votes
3answers
1k views

Does the use of Tor makes additional encryption unnecessary?

I know Tor uses encryption to guarantee anonymity, but I if wish to guarantee the privacy of my conversations should I use an additional layer of encryption? Can my home router or ISP intercept Tor ...
2
votes
5answers
24k views

SSH Not Accepting Public Key

When setting up ssh keys between two machines, the authentication only works one way. One server doesn't accept the public key of the other when trying to connect. Any ideas? Here's the verbose ...
2
votes
2answers
312 views

SSH auth by public key not working for one user on a system

I can't setup public key authentication for one particular user on a system. I checked user home and .ssh directories permissions, and it's good (drwx------. both, the same as for other users that can ...
2
votes
2answers
2k views

PGP private key password change and relationship to public key

I have been looking at PGP for a few days and noticed that if I change the password on the private key, parts of the private key change, but a large portion of it remains the same. The public key does ...
2
votes
2answers
86 views

Receiving a key from a keyserver in gnupg

How does one receive a key from a keyserver in gnupg? I have tried typing $ gnupg rec-keys "the key" Error given was, usage: gpg [options] [filename] I have also entered just rec-keys "the key" Error ...
2
votes
2answers
184 views

How should GnuPG's `--desig-revoke` command be used?

How should the GnuPG command --desig-revoke be used, and in which cases should you use it? According to the manual: --desig-revoke name Generate a designated revocation certificate for a key. ...
2
votes
1answer
161 views

How to extract public key from attestation certificate to use it for signature verification?

I want to extract the public key from a certificate to verify a given signature (to answer my own question in relation to the registration part). I've tried openssl x509 -in certificate.pem -pubkey -...
2
votes
2answers
148 views

Strange behavior on SSH public key login

I'm really stuck here. I've been trying to ssh into my ec2 server from local with a public key but it is not working. -> I get permission Denied (public key). The set up is as follows: Local: ...
2
votes
1answer
226 views

SSL failure fallback

I've successfully configured my Apache webserver to make use of public certificates as an authentication method, using following configuration: SSLVerifyClient require SSLVerifyDepth 1 ...
2
votes
1answer
187 views

Open SSH - issue logging in without password - public key

I'm having an issue where I'm unable to login by SSH - I've followed other guides and made sure permissions were set correctly, and that the publickeys on my local machine and remote machine match as ...
2
votes
1answer
2k views

There is no public key available for the following key IDs: 7638D0442B90D010

I try to add the debian sid source on ubuntu 12.04 LTS. I have already installed debian-keyring debian-archive-keyring. $ apt-cache search keyring | grep debian debian-archive-keyring - GnuPG archive ...
1
vote
2answers
32 views

Can PGP messages be verified with just the fingerprint of the public key?

What is the difference between sharing a public key and sharing just its 40-digit fingerprint? The public key is very long, so if I wanted someone to be able to verify my messages, could I just mail ...
1
vote
2answers
7k views

How to Debug Public Key SSH Authentication Failure

I'm trying to setup password-less SSH login, and I can't seem to make it work. Here is what I have done so far: Used ssh-keygen -t rsa to generate a pair of keys Created ~/.ssh/authorized_keys on ...
1
vote
1answer
111 views

Blocked out of server because I don't have access to usual ssh public key, any solution?

I momentarily don't have access to my usual computer and would like to work on my personal dev server (Raspberry Pi) as usual using ssh. My problem is I secured it so you can only log in it with my ...
1
vote
1answer
2k views

How does gpg handle multiple keys in a keypair?

As I understand it, keypairs used with gpg generally have more than one associated key: one for signing and one for encryption. How are these multiple keys managed when using gpg (to push to a ...
1
vote
1answer
33 views

Can I use the same key for SSH from different clients with the same username?

Situation: One server with SSH daemon. Multiple clients with the user myUser which should connect to the server via SSH. With password based authentication everything is fine. Now I would like to ...
1
vote
2answers
12k views

Permission denied (publickey,password)

I am trying to connect to local ip via SSH from terminal. Command is ssh -v user@192.168.0.2 But it is not connecting. Keeps giving me the error "Permission denied (publickey,password)." I have ...
1
vote
1answer
905 views

FileZilla public key not working (Successfully loaded 0 key pairs from file)

I currently have troubles logging in with a public key using FileZilla. Neither the root user, not an other user accept the key. Now the strange thing is when using putty it is working without any ...