News for hackers. Stuff that matters.

A comment on How often should I rotate my SSH keys?. Parent comment

Re:How often should I rotate my SSH keys? by nitrogen on Friday February 26, 2021 @03:47AM (#26272666)
Ship them off to where?

The usual networked logging systems that don't have ssh logins, e.g. syslog into ELK stack.

[ Parent | on HN ]
Re:How often should I rotate my SSH keys? by vel0city on Friday February 26, 2021 @10:32AM (#26275734) 

  curl -X "DELETE" http://log-server:9200/logstash-*
Probably works for a large percentage of deployed ELK logging stacks.
[ Parent | on HN ]
Re:How often should I rotate my SSH keys? by ddoeth on Friday February 26, 2021 @01:35PM (#26278111)
Are people not using elastic authentication?
[ Parent | on HN ]
Re:How often should I rotate my SSH keys? by vel0city on Saturday February 27, 2021 @09:50PM (#26290213)
Elasticsearch existed for years without any authentication on its community tier version, with xpack behind a call with a sales rep and a heavy pocketbook. These days, authentication is provided after you enable the free xpack plugin, but it is not enabled by default and their install guide doesn't exactly point it out to you right away. It starts delving into JVM tuning options before it even references there's this xpack thing you may want to look into.
[ Parent | on HN ]
Re:How often should I rotate my SSH keys? by CrazyPyroLinux on Sunday February 28, 2021 @04:27PM (#26297229)
I always just put it behind an authenticating proxy.
[ Parent | on HN ]
Re:How often should I rotate my SSH keys? by neolog on Friday February 26, 2021 @04:52AM (#26273087)
How do you set up elastic on a server that doesn't run sshd?
[ Parent | on HN ]
Re:How often should I rotate my SSH keys? by viraptor on Friday February 26, 2021 @06:19AM (#26273629)
Console. Cloud login. Different VPN connection. Different credential set then other hosts. Using a hosted service from a completely separate provider. Setting up infrastructure from images without external access.

And I'm sure I missed some - there's a thousand ways to do it.

[ Parent | on HN ]
Re:How often should I rotate my SSH keys? by tonoto on Friday February 26, 2021 @05:11AM (#26273208)
For real? console (in various ways/flavours) is one way.
[ Parent | on HN ]