Re: OpenSSHd problem.

From: Ulrich Keil (ulrich@der-keiler.de)
Date: 07/31/02


Date: Wed, 31 Jul 2002 14:01:07 +0200
From: Ulrich Keil <ulrich@der-keiler.de>
To: security-basics@securityfocus.com


On Mon, Jul 29, 2002 at 02:13:10PM +0100, Lee Rich wrote:
> I have just installed OpenSSH2.9p2 (from the RH7.2 RPM's) and configured the config file to my liking.

Check these links:

http://www.securityfocusonline.com/archive/1/279134/2002-06-21/2002-06-27/0
http://www.securityfocusonline.com/archive/1/279518/2002-06-21/2002-06-27/0
http://www.der-keiler.de/Mailing-Lists/VulnWatch/2002-07/0004.html

and update your OpenSSH first.

> However I don't have any host key files.
> SSHd won't run unless they are present witin the specified directory.
> Is there a way to generate a host key.. or am I missing something here?

Normally, ssh on RedHat will generate these keys on the first startup.

Here is the way this is done:

ssh-keygen -b 1024 -f /etc/ssh/ssh_host_key -N ''
ssh-keygen -t dsa -b 1024 -f /etc/ssh/ssh_host_dsa_key -N ''
ssh-keygen -t rsa -b 1024 -f /etc/ssh/ssh_host_rsa_key -N ''

Ulrich

-- 
http://www.der-keiler.de
PGP Fingerprint: 5FA4 4C01 8D92 A906 E831  CAF1 3F51 8F47 1233 9AAD
Public key available at http://www.der-keiler.de/uk/pgp-key.asc




Relevant Pages

  • Re: [opensuse] sshd broke!!
    ... but I normally ssh into it. ... Today I tried and it is failing to accept me. ... sshd: ... I assume I need to create a host key, but I don't know where it is ...
    (SuSE)
  • Re: [opensuse] sshd broke!!
    ... but I normally ssh into it. ... sshd: ... I assume I need to create a host key, but I don't know where it is ... But I wonder if perhaps it's a permissions thing. ...
    (SuSE)
  • Re: "./sshd start" then nothing
    ... > realize this when I cvsup the stable source). ... > generate host key and stuff. ... or otherwise sshd start won't start sshd. ...
    (freebsd-questions)
  • Re: OpenSSHd problem.
    ... > SSHd won't run unless they are present witin the specified directory. ... > there a way to generate a host key.. ... or am I missing something here? ...
    (Security-Basics)
  • RE: How to determine the version of sshd
    ... If you type 'sshd -v' you will get an error telling you it's not supported, ... -k seconds Regenerate server key every this many seconds ... -h file File from which to read host key (default: ... To unsubscribe, ...
    (freebsd-questions)