ssh host key inconsistency

From: Tony Finch (dot@dotat.at)
Date: 07/26/02 

Date: Fri, 26 Jul 2002 13:58:37 +0100
From: Tony Finch <dot@dotat.at>
To: des@freebsd.org, freebsd-security@freebsd.org

I note that rc.network is now creating ssh host keys in both DSA and
RSA forms, but our sshd is only using the DSA key. Shall I commit this
patch which reverts one of our local changes?

Tony. 

-- 
f.a.n.finch <dot@dotat.at> http://dotat.at/
NORTH BAILEY: SOUTHWESTERLY 5 TO 7. SQUALLY SHOWERS. GOOD.
--- servconf.c	3 Jul 2002 22:11:43 -0000	1.3.2.14
+++ servconf.c	26 Jul 2002 12:52:41 -0000
@@ -145,6 +145,8 @@
 			    _PATH_HOST_KEY_FILE;
 		if (options->protocol & SSH_PROTO_2) {
 			options->host_key_files[options->num_host_key_files++] =
+			    _PATH_HOST_RSA_KEY_FILE;
+			options->host_key_files[options->num_host_key_files++] =
 			    _PATH_HOST_DSA_KEY_FILE;
 		}
 	}
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: ssh host key inconsistency
    ... > I note that rc.network is now creating ssh host keys in both DSA and ... but our sshd is only using the DSA key. ... we intentionally do not use the RSA host key by default. ...
    (FreeBSD-Security)
  • ssh: dsa or rsa
    ... SOLARIS 10 and ssh_keygen ... Should I create a rsa or dsa key? ... Which one is more secure? ...
    (comp.unix.solaris)