Re: X509 certificates with ssh

From: Timo Felbinger (Timo.Felbinger_at_quantum.physik.uni-potsdam.de)
Date: 10/25/03

  • Next message: Soni: "Look at these important package" 
    Date: Sat, 25 Oct 2003 14:58:03 +0200

    On Sat, 25 Oct 2003, Julie Bielski wrote:

    > Timo,
    >
    > Thanks for your response. My bigger problem turned out to be the private key
    > rather than the public key. The keytool utility does not allow you to
    > extract the private key from it's Java Key Store file (.keystore). Without
    > the private key, there's no way to authenticate. So I just decided to use
    > separate keys for signing vs. authentication. I'll use the keys I created
    > with keytool for signing, and my id_dsa/id_dsa.pub keys for authentication
    > with ssh.
    >

    Not sure whether this is an option for you, but if you could use
    openssl (subcommand "genrsa" or "gendsa") for key generation, the
    private key will be generated in the correct format for OpenSSH,
    with no conversion required at all. For the public part, I like to
    store it in a certificate, as this bundles the key with additional
    information on its owner, and it allows easy verification of key
    integrity.

    Regards,

    Timo 

    -- 
Timo Felbinger                  <Timo.Felbinger@physik.uni-potsdam.de>
Quantum Physics Group           http://www.quantum.physik.uni-potsdam.de
Institut fuer Physik            Tel: +49 331 977 1793      Fax: -1767
Universitaet Potsdam, Germany
  • Next message: Soni: "Look at these important package"

    Relevant Pages

    • Re: Computer Certificate Private Key
      ... Only v2 certificate templates give you the control that you desire. ... I have auto enrollment for computer template. ... It is not a security breach if *you* decide to put the private key on the ... >>> If I use different computer and i tried to authenticate, to IAS, ...
      (microsoft.public.security)
    • Re: Computer Certificate Private Key
      ... I have auto enrollment for computer template. ... It is not a security breach if *you* decide to put the private key on the ... If I use different computer and i tried to authenticate, to IAS, would ... However, the recipient of a signed key exchange (in this case, IAS) might ...
      (microsoft.public.security)
    • Re: Computer Certificate Private Key
      ... *You* have decided to export a private key and import it on a non-trusted host. ... It is not a security breach if *you* decide to put the private key on the offending host. ... but it does not authenticate to domain. ... However, the recipient of a signed key exchange (in this case, IAS) might ...
      (microsoft.public.security)
    • Re: X509 certificates with ssh
      ... The keytool utility does not allow you to ... extract the private key from it's Java Key Store file. ... >> can authenticate to an account I have on another system. ... I did not find a canonical way to extract a public key ...
      (comp.security.ssh)
    • Encrypting name and password
      ... I'm build a windows application where I pass the user id and password to WS ... information using the private key to authenticate the user. ... Prev by Date: ...
      (microsoft.public.dotnet.framework.webservices.enhancements)