Collaborate Disseminate
Bit new in ssh and have an issue in understanding. I got a code which uses ssh_auth_list routine as below.
method = ssh_auth_list(session);
printf(” %d ” , method);
I am using a ssh library and when I am calling this routi… Continue reading SSH (ssh_auth_list) authentication failing from windows to linux
To work with ECDSA keys I am using the python-ecdsa library. Unfortunately this library can not process keyfiles properly if they are provided in the OpenSSH format. Instead I generate them in the PEM format, which the librar… Continue reading Convert ECDSA keys (PEM, OpenSSH)
I want to use CA signed SSH keys (that would be rotated frequently and have short expiry, ideally centrally managed, all that great stuff). Unfortunately, most of windows GUI tools, such as WinSCP or even PuTTY, don’t support… Continue reading How secure is passwordless and keyless SSH login on 127.0.0.1 only, over a secure authenticated tunnel?
I’ve been pondering/hacking/experimenting/using/misusing and am torn/puzzled over this for the past month or so;
Which of these methods should prove themselves more secure/least susceptible to be exploited, when generating ss… Continue reading SSH AUTH : sekey vs yubikey vs ssh-keygen
I accidentally exposed the keys in /etc/ssh
What is the risk?
I think it will allow someone to impersonate the server and conduct MITM.
Will it let someone SSH into the server? I think not because they’re not the private k… Continue reading Exposure of /etc/ssh, risks?
AMD Epyc processors support Secure Encrypted Virtualization (SEV), a technique that prevents even a hypervisor reading memory belonging to a virtual machine. To pull this off, the encryption and decryption is handled on the fly by the Platform Security Processor (PSP), which is an ARM core that handles processor start-up …read more
I have a small web-facing server on my home network. It is headless, and the only way to log in is to ssh with pubkey authentication from within the local network.
I wanted to turn on a 2FA authentication PAM module for any… Continue reading Sufficient to only require 2FA for su elevation?
A file is send from ServerA to ServerB using self written automation tool via scp bash command. There is SHA-256 thumbprint required for ServerB host validation. What is the correct approach here to ensure in ServerA that th… Continue reading Validate SHA-256 thumbprint before send flle with scp
Here’s a way to keep secrets safe in memory, even in a world of hardware-level leakage due to tricks like Rambleed, Spectre and more. Continue reading Serious Security: Rambleed attacks blunted – the OpenSSH way
I have my server host key(private key) in Openssl format that i want to use for server authentication.
I prefer to use the trust model that client local database should associates each host name with the corresponding public… Continue reading server host key usage problem