My pfsense failed an audit by securitymetrics.com

kapara

Like this:

AAAAB3NzaC1yc2EAAAABJQAAAIEAiNNMQ8KAZQhyRdek5p/anBZpBiBCsiF3BzGb
vDhGtCC+oFj7/jJsmLcPmUcxQp/L5Gz0fBzQUEcd1AZK3gTG/pEHzE8x2PU5iqSX
+LBbHIDQZuz461iiMwnL9Xu8I9T2+B7i3KX/t34SvubWYPvP6ZO/Q/+Rdmbwmmsb
GZ2FC1U=

or

ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAiNNMQ8KAZQhyRdek5p/anBZpBiBCsiF3BzGb
vDhGtCC+oFj7/jJsmLcPmUcxQp/L5Gz0fBzQUEcd1AZK3gTG/pEHzE8x2PU5iqSX
+LBbHIDQZuz461iiMwnL9Xu8I9T2+B7i3KX/t34SvubWYPvP6ZO/Q/+Rdmbwmmsb
GZ2FC1U=

jlepthien

Like the second one. That's what I do…

kapara

When I use the one with ssh-rsa I get connection refused. When I go to auth in putty and select the private.pkk file and try to open the connection I get connection error.

jlepthien

Did you get your key by opening puttygen and loading your private key there?

kapara

I generate public key and copy then export private key. Right?

jlepthien

You can use puttygen to generate a pair and then copy the key from the top of the window which says "Public key for pasting into OpenSSH authorized_keys file:"…

kapara

Here is a new example:

ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIBb5HVQf5Nbdu6+bC2dE2bM1ZNC/7USV/jJRcRNtBSu9plZCEAz4BRwCkMiuHlFNHT+FO6fjcdg9Jzb/csZ8SyVP9wY0iSDYeDd9eY5N04LceCGb2AxqrL24a09BftVSlQnXvbsPaume+fKgVVMo6NCDoUhPI917PUyIlNZ8YBD9w== rsa-key-20100303

I pasted this into System:Advanced:Secure Shell:Authorized Keys. Saved.

Then open Putty and loaded session with internal pfsense IP. Clicked on Auth in Putty and browsed to the Private.pkk file which I downloaded from puttygen.

Fail. ???

jlepthien

Yep. That sounds about right. Are you running 1.2.3 also?

kapara

1.2.3-RELEASE
built on Mon Dec 7 20:21:30 EST 2009

kapara

Should I remove: rsa-key-20100303 from the end of the key?

jlepthien

Nope. I have that, too….

Please check when logged in that the key is really there....

cat .ssh/authorized_keys

kapara

you mean check via winscp?

jlepthien

No. Login via putty and ssh. And then do that command in /root

kapara

Seems to be going from Bad to worse.

I deleted the key and unchecked the box disabling password for SSH. No when I connect I get:

Disconnected: No Supported authentication methods available.

jlepthien

Use your console to connect to the box…

kapara

ok. Disables SSH and enabled and now I am back in.

cat: .ssh/authorized_keys: No such file or directory

kapara

Ok. So I repasted info and connected with private ket and got the following:

login as: root
Server refused our key
Using keyboard-interactive authentication.
Password:

Though I was able to get through….

jlepthien

Also when you login as 'admin'?

kapara

I am able to get in no matter what…

jlepthien

Log in again and then do:

cd /root
cd .ssh
ls -la (post output, there should be a authorized_keys files after you pasted your key via GUI)

Are you running on embedded?