Sponsored Content
Operating Systems Solaris Change from weak ssh host key to strong one Post 303036234 by Neo on Thursday 20th of June 2019 03:50:37 AM
Old 06-20-2019
You need to generate ssh key pairs which are longer in length.

Modern computers can "break" the crypto based on brute force (millions of attempts of various keys, for example.)

The longer the length of the key, the larger the key domain and hence the stronger the crypto.

You are being advised to generate new keys which are stronger cryptographically because the key lengths will be longer.
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

change user> to user@host> ssh prompt

Hi, I was wondering how to change the prompt for my ssh login. At the moment it is like user> while I'd like it to be as user@host> It is in the .bash_profile or .ssh ??? Thanks (2 Replies)
Discussion started by: pmasterkim
2 Replies

2. UNIX for Advanced & Expert Users

RSA host key addition

Guys How do i add RSA key for a host ? I was able to connect to a host some time back but now its not connectable ,via SSH. Message i get is : abhi@myHost:~/.ssh> ssh eatcid@yourHost @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION... (3 Replies)
Discussion started by: ak835
3 Replies

3. Shell Programming and Scripting

Using ssh to add register key on ssh server

Hi, I want to use ssh to add a register key on remote ssh server. Since there are space characters in my register key string, it always failed. If there is no space characters in the string, it worked fine. The following is what I have tried. It seems that "ssh" command doesn't care about double... (9 Replies)
Discussion started by: leaftree
9 Replies

4. UNIX for Advanced & Expert Users

Help! How to find the local host after few ssh hops to remote host???

I do a ssh to remote host(A1) from local host(L1). I then ssh to another remote(A2) from A1. When I do a who -m from A2, I see the "connected from" as "A1". => who -m userid pts/2 2010-03-27 08:47 (A1) I want to identify who is the local host who initiated the connection to... (3 Replies)
Discussion started by: gomes1333
3 Replies

5. Shell Programming and Scripting

Host Key verification failed

Hi, I am running a script to scp a file from one server to another. I have created the public/private key and copied the public key to the other server and appended it to authorized_key file. But i am getting the error message saying "Host Key verification failed" Connection lost. It works well... (3 Replies)
Discussion started by: ahamed
3 Replies

6. UNIX for Dummies Questions & Answers

host key issue via java

Hi, I am encountering below mentioned exception when I execute my Java program that is supposed to SFTP the file from one server over to another. Can you please tell me some pointers to resolve this issue? Exception HostName- 10.1.1.1 ; userName- bmsftp log4j:WARN No appenders could be... (0 Replies)
Discussion started by: prashant.ladha
0 Replies

7. Solaris

Solaris 8 ssh public key authentication issue - Server refused our key

Hi, I've used the following way to set ssh public key authentication and it is working fine on Solaris 10, RedHat Linux and SuSE Linux servers without any problem. But I got error 'Server refused our key' on Solaris 8 system. Solaris 8 uses SSH2 too. Why? Please help. Thanks. ... (1 Reply)
Discussion started by: aixlover
1 Replies

8. Solaris

Ssh between servers - No DSA host key is known

It seems I can do ssh <IP> but not ssh <hostname> If I try to ssh to hostname I get the error - No DSA host key is known for host1 and you have requested strict checking. Host key verification failed. Where do I set up the DSA keys? Is it ssh_known_hosts? Assume afterwards I can... (3 Replies)
Discussion started by: psychocandy
3 Replies

9. UNIX for Beginners Questions & Answers

Host key verification failed error

HI i am getting host key verification failed error. # cat id_rsa.pub | ssh root@10.110.51.245 'cat >> .ssh/authorized_keys;exit;' cat: id_rsa.pub: No such file or directory @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! ... (3 Replies)
Discussion started by: scriptor
3 Replies

10. Forum Support Area for Unregistered Users & Account Problems

Password sent via reset password email is 'weak' and won't allow me to change my password

I was unable to login and so used the "Forgotten Password' process. I was sent a NEWLY-PROVIDED password and a link through which my password could be changed. The NEWLY-PROVIDED password allowed me to login. Following the provided link I attempted to update my password to one of my own... (1 Reply)
Discussion started by: Rich Marton
1 Replies
PLAINRSA-GEN(8) 					    BSD System Manager's Manual 					   PLAINRSA-GEN(8)

NAME
plainrsa-gen -- generator for Plain RSA keys SYNOPSIS
plainrsa-gen [-b bits] [-e pubexp] [-f outfile] [-h] DESCRIPTION
plainrsa-gen can be used to generate Plain RSA keys for authentication purposes. Using Plain RSA keys is optional. Other possibilities are Pre-shared keys or X.509 certificates. -b bits bit length of the key. Default is 1024, recommended length is 2048 or even 4096 bits. Note that generating longer keys takes more time. -e pubexp value of the RSA public exponent. Default is 0x3. Don't change this unless you really know what you are doing! -f outfile write the resulting key to outfile instead of stdout. If the file already exists it won't be overwritten. You wouldn't like to lose your private key by accident, would you? OUTPUT FILE FORMAT
This is the secret private key that should never leave your computer: : RSA { # RSA 1024 bits # pubkey=0sAQOrWlcwbAIdNSMhDt... Modulus: 0xab5a57306c021d3523... PublicExponent: 0x03 PrivateExponent: 0x723c3a2048... Prime1: 0xd309b30e6adf9d85c01... Prime2: 0xcfdc2a8aa5b2b3c90e3... Exponent1: 0x8cb122099c9513ae... Exponent2: 0x8a92c7071921cd30... Coefficient: 0x722751305eafe9... } The line pubkey=0sAQOrW... of the private key contains a public key that should be stored in the other peer's configuration in this format: : PUB 0sAQOrWlcwbAIdNSMhDt... You can also specify from and to addresses for which the key is valid: 0.0.0.0/0 10.20.30.0/24 : PUB 0sAQOrWlcwbAIdNSMhDt... SEE ALSO
racoon.conf(5), racoon(8) HISTORY
plainrsa-gen was written by Michal Ludvig <michal@logix.cz> and first appeared in ipsec-tools 0.4. BSD
June 14, 2004 BSD
All times are GMT -4. The time now is 05:12 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy