#private-key

How to: Easy multi-level authentication for sudo #computers #development #answer

Easy multi-level authentication for sudo

I have a FreeBSD server with password-based SSH enabled. I would like to enable sudo, but I do not want a potential attacker to be one password away from root access. My current solution is logging in as root using a public key (remote password authentication is disabled for root), and my normal user is not in wheel and sudo is not installed.

In the past,…

Resolved: Security concerns of displaying ssh private key #answer #development #computers

Security concerns of displaying ssh private key

I’ve made I huge mistake, or at least I think it is: I’ve “catted” my private SSH key

cat ~/.ssh/id_rsa

I’m now afraid that I’ve created a security hole, allowing other users to see my private key by looking at bash/scrollback history or using other methods. So, my questions:

Did I really compromise the security of my SSH keypair?

Are there…

Resolved: How to secure your CA's private key? #dev #fix #answer

How to secure your CA’s private key?

I’m about to implement my own Certification Authority (CA) for interal use only.

Now there is a problem, that the CA private should never ever be exploited. So right now the private key is encrypted.

What else could be done to enhance the security of the private key?

Answer [by andol]: How to secure your CA’s private key?

One big gain is to keep the private…

Fix: Why does Amazon release private keys instead of public keys? #answer #computers #solution

Why does Amazon release private keys instead of public keys?

My brain is wrapped around the axle on public and private keys. When you create a cloud server (instance) on Amazon’s EC2 service and then want to connect to it via SSH, Amazon requires you to download private a key to make the connection. Doesn’t the idea behind public/private key suggest that Amazon should be require you to download a…

Fixed: Bypass ssh key file permission check #answer #computers #dev

Bypass ssh key file permission check

I have an encrypted FAT volume (for compatibility) containing a private key file and other sensitive data.

I want to connect to my server through SSH using my private key, but of course, as FAT doesn’t support file permission, it ignores my key saying its permissions are too open.

So currently I’m copying it somewhere else on my hard drive with 0600…

Fixed: How do I setup ssh with both private key and password? #programming #answer #solution

How do I setup ssh with both private key and password?

How do I setup ssh with both private key and password?

In /etc/ssh/sshd_config, I currently have:

RSAAuthentication yes PubkeyAuthentication yes PasswordAuthentication yes

But apparently this allows a user to login using either a private key or password.

Answer [by Matt Simmons]: How do I setup ssh with both private key and password?

You…

Fixed: What does this ssh error mean? #programming #development #computers

What does this ssh error mean?

This is my last resort. I’ve been trying to figure out the problem here for hours.

Here’s the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ssh to a server with my public key just fine, but machine #2 gives the following output, when trying to connect to the server:

$ ssh -vvv -i /home/kevin/.ssh/kev_rsa…

Solution: What does this ssh error mean? #it #solution #computers

What does this ssh error mean?

This is my last resort. I’ve been trying to figure out the problem here for hours.

Here’s the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ssh to a server with my public key just fine, but machine #2 gives the following output, when trying to connect to the server:

$ ssh -vvv -i /home/kevin/.ssh/kev_rsa…