LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Removing ssh authenticatin private key ppk (https://www.linuxquestions.org/questions/linux-networking-3/removing-ssh-authenticatin-private-key-ppk-736406/)

moor93 06-29-2009 09:09 AM

Removing ssh authenticatin private key ppk
 
hello guys

i own a linux-based router which accept ssh connection.
with this linux distrbution (Linux version 2.4.24-uc0-iDirect0 (root@s1100bld) (gcc version 3.3.2) #1 Thu Jun 19 06:19:00 EDT 2008)

i cant connect to it remoetly through putty or winscp cuz it's requird private key

i have a physical connection to it through console cable & i want to remove this key so i can connect to it using password method only but i don't know how.

i tried the x509 command but i got nothing.

iceman47 06-30-2009 05:04 AM

ssh keys are usually stored in /home/<user>/.ssh/ or /etc/ssh/, have a look around.

akiku 06-30-2009 06:22 AM

Quote:

Originally Posted by moor93 (Post 3590075)
hello guys
i cant connect to it remoetly through putty or winscp cuz it's requird private key

You can connect using ssh through the wired connection?
If so, you should be able to configure sshd to accept remote connections by editing the daemon configuration on your router (/etc/ssh/sshd_config).
You'll also need to add the public key of the computers you will be using to connect remotely to the authorized_keys file in the router (~/.ssh/authorized_keys).
Allowing password authentication can be dangerous; you'll have bots trying brute force attacks to get in.

MQMan 06-30-2009 12:32 PM

Quote:

Originally Posted by akiku (Post 3591310)
Allowing password authentication can be dangerous; you'll have bots trying brute force attacks to get in.

Even with just private key allowed, they still try. :D

Cheers.

akiku 07-01-2009 07:08 AM

Quote:

Originally Posted by MQMan (Post 3591760)
Even with just private key allowed, they still try. :D

Cheers.

Right, but as long you don't do something really stupid with your private key (like posting it on the web), they will never get through.

Another option to look at if you're really paranoid, like me, is to use a usb token like the yubi key. This too would implement 2-factor authorization. No bot will get in that way.

moor93 07-01-2009 09:10 AM

Thank you guys

can i remove these keys using x509 command


All times are GMT -5. The time now is 05:56 PM.