at
· Tags: 7-zip, 7z, Adobe, Adobe Illustrator, Adobe Photoshop, alternative, Apple, applications, bittorrent, Debian, Drawing, Fedora, Firefox, Gnome, GNOME Do, IE, IE alternative, Infra Recorder, Inkscape, Internet Explorer, Internet Explorer alternative, iTunes, Launchy, Linux, Mac, Microsoft, Microsoft Windows, mp3, Notepad++, Open Source, Open Standards, OpenOffice, OSX, Paint.NET, pdf, PDFCreator, peer to peer, photo processing, Picasa, Presentation editor, quicksilver, Scribus, TOP10, Ubuntu, Usability, uTorrent, video player, Virtual Machine, virtualbox, Vista, VLC, VLC Player, Windows, Windows 7, Wonderful and quick editor, xp
Permalink
at
· Tags: apache, Debian, Fedora, Firefox, Linux, Open Source, Open Standards, openSSL, openssl show certificate, openssl show certificate details, openssl show certificate info, openssl show certificate information, openssl view certificate, ssl, Ubuntu
Permalink
at
· Tags: apache, certificates, Debian, Fedora, Linux, no certificate matches private key, Open Source, Open Standards, openSSL, openssl No certificate matches private key, private key, Public Key, security, ssl, Ubuntu, x509
The private key contains a series of numbers. Two of those numbers form the “public key”, the others are part of your “private key”. The “public key” bits are also embedded in your Certificate (we get them from your CSR). To check that the public key in your cert matches the public portion of your private key, you need to view the cert and the key and compare the numbers.
Normally it requires some manual number matching to match a given private key with a given certificate, however with this command you are able to do a comparison automatic:
$ (openssl x509 -noout -modulus -in server.pem | openssl md5 ;\
openssl rsa -noout -modulus -in server.key | openssl md5) | uniq
(If more than one hash is displayed, they don’t match)
Related posts:
- View x509 certificate details
- Howto Create Generate a Certificate Signing Request
- Howto: Convert an OpenSSL key to a public/private OpenSSH key-pair
- View The Contents Of A Certificate Signing Request (CSR)
- Openssl to create an unencrypted key from an encrypted one (Remove password)
- SSH Key for Login Without Password
- SSL Certificates Review: What to Buy
- OpenSSL CSR Wizard
- Credit Card Number Generator
- Howto Secure Apache
Permalink
at
· Tags: convert, convert cer to crt, convert cer to pfx, convert crt to pfx, convert pfx to cer, FreeBSD, Linux, NetBSD, Open Source, Open Standards, OpenBSD, OpenSSH, openSSL, Private, private key, Public Key, SSH, ssl
This howto demonstrates how to convert an OpenSSL key to a public/private OpenSSH key-pair.
The motivation for converting this is simple — dual use. That is to say, any user or application that has been issued a certificate can now use their SSL-based credentials for both SSL- and SSH-based authentication.
Requirements
You’ll need a valid certificate and private key — actually only the key is required. This recipe assumes that your certificate and key will have the names user-crt.pem and user-key.pem, respectively. If your key is encrypted (which it should be), you’ll also need to have it’s passphrase handy.
You’ll need a shell account on a system that supports OpenSSH logins using public/private key authentication.
Solution
The solution is to extract the public key from the private key using ssh-keygen, copy the new key-pair into place, and test them out.
1. Copy the private SSL key to ~/.ssh/id_ssl.
$ cp user-key.pem ~/.ssh/id_ssl
$ chmod 600 ~/.ssh/id_ssl
2. Extract the public SSH key using ssh-keygen.
$ ssh-keygen -y -f ~/.ssh/id_ssl > ~/.ssh/id_ssl.pub
$ chmod 600 ~/.ssh/id_ssl.pub
3. Add the public key to your authorized_keys
$ cat ~/.ssh/id_ssl.pub >> ~/.ssh/authorized_keys
4. Test the new key by attempting to SSH to localhost.
$ ssh -i ~/.ssh/id_ssl localhost
At this point, you’ll need to enter your passphrase (assuming you had one), and if all goes well, you’ll be sitting at a new shell prompt.
5. Remove the test key from your authorized_keys file.
In theory, a single certificate and key issued to an employee would be sufficient to access all participating SSL- and SSH-based resources in a given environment (or perhaps the entire company).
This post is based on an original recipe by Klayton Monroe.
Related posts:
- SSL: Verifying that a Certificate matches a Private Key
- SSH Key for Login Without Password
- Openssl to create an unencrypted key from an encrypted one (Remove password)
- Howto Create Generate a Certificate Signing Request
- Howto Convert Text File From UTF-8 to ISO-8859-1 Encoding
- GnuPG/GPG: Exporting your Public Key
- Sending Spam with SWT
- SSL Certificates Review: What to Buy
- OpenSSL CSR Wizard
- OpenSSH: Disabled Reverse DNS Lookup
Permalink
at
· Tags: Debian, Design, ext2, ext3, ext4, Fedora, filesystem, FreeBSD, image, kvm, Linux, Open Standards, Qemu, Ubuntu, virtual server, virtualbox, virtualization, Win4lin, Xen
Win4lin, KVM, QEMU, Virtualbox and Xen are all widely used technologies, used in virtual servers. Fairly often a virtual server run from within a loop filesystem and generally start with a fairly small file (1GB is big for a normal file, but not when it is pretending to be an entire filesystem!)
However things often grow over time.
Here is a nice simple procedure for increasing the size of a loop filesystem, if the filesystem is ext2 or ext3 (the procedure should work for ext4 too, but I havn’t tested it yet)
1. Stop the virtual server that is using the loop filesystem
2. Add some extra space to your loop filesystem file
# dd if=/dev/zero bs=1024k count=1024 >> loop_image_file
This adds 1GB to the end of a file called loop_image_file (make sure to use the append output redirector >> not a single >, otherwise you’ll have an empty 1GB file!)
3. Force a check on the resized/increased filesystem
# e2fsck -f loop_image_file
4. Resize the filesystem within the loop filesystem file
# resize2fs loop_image_file
5. Start the virtual server again
Related posts:
- Migrate existing Ext3 filesystems to Ext4
- Xen Howto: Install Windows
- How to mount bin / cue image files in Linux
- Howto: How to Reset the MySQL Root Password
- Ubuntu Server Edition JeOS
- Howto Install Windows XP / Vista on Xen
- How to Mount a Remote Filesystem Using SSH and sshfs
- Importing / Exporting Virtual Disk Images with Virtual Box
- Ubuntu Howto: Install Xen
- Virtualization Visualization with Visio
Permalink
at
· Tags: Linux, Michael Silver, Microsoft, Microsoft Vista, Microsoft Windows, Neil MacDonald, odf, office, OOXML, Open Source, Open Standards, OpenDocument, OpenOffice, outgrown hardware, Windows 7
Microsoft Windows is collapsing under its own weight and radical changes are needed to change that according to Gartner.
Microsoft’s Windows juggernaut is collapsing as it tries to support 20 years of applications and becomes more complicated by the minute. Meanwhile, Windows has outgrown hardware and customers are pondering skipping Vista to wait for Windows 7. If Windows is going to remain relevant it will need radical changes.
That sobering outlook comes courtesy of Gartner analysts Michael Silver and Neil MacDonald. Half of a full room of IT managers and executives raised their hands when asked whether Microsoft needed to radically change its approach to Windows. “Windows is too monolithic,†says Silver.
News Stories on the issue
– Windows collapsing under its own weight; Radical change needed
– Gartner: Windows heavyweight champ, but no longer nimble
Well, Well – Finally somebody shed light on this issue.
Could he same thing be said about the recently ISO-approved standard OOXML, since it is very bloated too – especially compared to OpenDocument (odf).
Related posts:
- How to Download Microsoft Windows 7
- Microsoft forced partners to vote Yes
- ISO captured by vendor Microsoft?
- X11 for Windows XP and Vista
- NO to the Microsoft Office format as an ISO standard
- Top 10 Free Windows 7 Applications
- Unix beats Windows – says Microsoft Research
- Microsoft is using Linux
- Windows Developers Begin Slow Defection to Linux
- an ex-microsoft employee’s view on Linux and the open source community
Permalink
at
· Tags: Brussels, International Standards Organisation, iso, Microsoft, odf, office, Office OpenXML (OOXML), OOXML, Open Source, Open Standards, OpenOffice, xml
Permalink
« Previous entries Next Page » Next Page »