Collaborate Disseminate
I recently re-encrypted my SSH private key to use the new OpenSSH format with lots of KDF rounds (-o -a 200) (takes about 5 seconds to run on my CPU). Unfortunately, I mistyped my passphrase in exactly the same way on both pr… Continue reading test SSH private key from STDIN
According to my understanding of Kerberos, a client is supposed to only enter its password once for obtaining the TGT from the Kerberos server and the authentication against the web services (f.e. SSH, Apache, SMB …) is onl… Continue reading Is MIT Kerberos supposed to ask for a password when authenticating to SSH?
Let’s say that on my personal computer, I host a VM I use to do software development. My personal computer is connected to the internet and running Ubuntu 16.04 and my guest is CentOS 7.
I don’t want to bother with SSH keys … Continue reading What are the security implications of enabling anonymous root/sudo access with sshd on a local guest VM?
I’m using OpenSSH version 7.1p2 (in mobaXterm)
When connecting to a remote SSH server (based on OpenSSH) I sometimes want to disable channel muxing.
I found in the documentation the option to send global request “no-more-se… Continue reading What is the command line option to force OpenSSH to send no-more-sessions@openssh.com
I am playing around with ssh keys with ED25519.
I have seen a couple of libraries playing with generating the public/private key pair. Another parsing the openssh private key to get the key, but the challenge I’m running into is getting th… Continue reading SSH ED25519 Key Extract pk (32 bytes)
I know that the client needs a client key-pair for client authentication; Clients sends its public key to the Server for it to encrypt a challenge which will be decrypted by the Client to authenticate the Client.
I also know… Continue reading Why does a SSH server need a host key-pair?
I’m only starting to learn SSH.
Is it possible to have per-host authorized_keys file (eg /etc/ssh/authorized_keys) to allow passwordless login for every user of the given host?
To test I’ve tried to connect (to a server hav… Continue reading Per-host authentication and configuration of ssh files
I’m setting up an SSH key signing server, using Neflix BLESS as the base
github(dot)com/Netflix/bless.
There is a critical option for source-address to ensure that the certificate can only be used from a list of specific IP addresses, but… Continue reading SSH CertKey Signing Destination
Recently my unix server (Ubuntu 14.04.4) got compromised and 1 of my domains is now showing some content I didn’t put there. I tried connecting to my server via SSH but the server returned the following warning:
WARNING: RE… Continue reading Fix a real SSH MITM attack
I have faced a problem with my VPS. It seems that someone has added his public key to my authorized_keys file and logged in to my VPS.
Postponed publickey for xxx from 223.255.145.158 port 52240 ssh2 [preauth]
debug1: userau… Continue reading Do I have an ssh intruder in my VPS?