Removing ssh authenticatin private key ppk

moor93 · 06-29-2009, 09:09 AM

hello guys

i own a linux-based router which accept ssh connection.
with this linux distrbution (Linux version 2.4.24-uc0-iDirect0 (root@s1100bld) (gcc version 3.3.2) #1 Thu Jun 19 06:19:00 EDT 2008)

i cant connect to it remoetly through putty or winscp cuz it's requird private key

i have a physical connection to it through console cable & i want to remove this key so i can connect to it using password method only but i don't know how.

i tried the x509 command but i got nothing.

iceman47 · 06-30-2009, 05:04 AM

ssh keys are usually stored in /home/<user>/.ssh/ or /etc/ssh/, have a look around.

akiku · 06-30-2009, 06:22 AM

Quote:

Originally Posted by moor93

hello guys
i cant connect to it remoetly through putty or winscp cuz it's requird private key

You can connect using ssh through the wired connection?
If so, you should be able to configure sshd to accept remote connections by editing the daemon configuration on your router (/etc/ssh/sshd_config).
You'll also need to add the public key of the computers you will be using to connect remotely to the authorized_keys file in the router (~/.ssh/authorized_keys).
Allowing password authentication can be dangerous; you'll have bots trying brute force attacks to get in.

MQMan · 06-30-2009, 12:32 PM

Quote:

Originally Posted by akiku

Allowing password authentication can be dangerous; you'll have bots trying brute force attacks to get in.

Even with just private key allowed, they still try.

Cheers.

akiku · 07-01-2009, 07:08 AM

Quote:

Originally Posted by MQMan

Even with just private key allowed, they still try.

Cheers.

Right, but as long you don't do something really stupid with your private key (like posting it on the web), they will never get through.

Another option to look at if you're really paranoid, like me, is to use a usb token like the yubi key. This too would implement 2-factor authorization. No bot will get in that way.

moor93 · 07-01-2009, 09:10 AM

Thank you guys

can i remove these keys using x509 command