How to store server host keys

From: Andrew Jorgensen (null@null.org)
Date: 06/28/02


From: Andrew Jorgensen <null@null.org>
Date: Fri, 28 Jun 2002 11:38:20 -0600

Hello,

We have many machines that get reinstalled every time there's a new
release of RedHat. The problem, then, is that their host keys get
destroyed in the install and ssh clients complain about the key being
changed. I can think of many ways to overcome this problem, but I'm
looking for a 'best practice' kind of solution. I'd rather not
compromise the security of my machines by putting their keys somewhere
stupid, but generating a new key every time I reinstall isn't the best
option either.

This must be a common problem.
Any thoughts? What's worked for you?

Thanks,

Andrew Jorgensen



Relevant Pages

  • Re: How to store server host keys
    ... The problem, then, is that their host keys get ... > destroyed in the install and ssh clients complain about the key being ... > compromise the security of my machines by putting their keys somewhere ... but generating a new key every time I reinstall isn't the best ...
    (comp.security.ssh)
  • Re: How to store server host keys
    ... The problem, then, is that their host keys get ... > destroyed in the install and ssh clients complain about the key being ... > compromise the security of my machines by putting their keys somewhere ... but generating a new key every time I reinstall isn't the best ...
    (comp.security.ssh)
  • Re: Language independant public key
    ... We need to be able to encrypt on the non-Java ... and install it on each of the machines. ... Pay for a security provider ... Why do you need public keys? ...
    (comp.security.misc)
  • Re: Office applications crash on one machine but not others
    ... keys, of course) on our other machines seem quite stable. ... You can drag some test files to Shared to have ... which product key relates to the troublesome machine? ...
    (microsoft.public.mac.office)
  • Re: Connect Network Registry
    ... > machines are under the MSHOME workgroup. ... > I am able to pick up and connect Home2 from the "Select ... > HKEY_LOCAL_MACHINE and HKEY_USERS keys. ... > Name, Processor Type, processor Speed etc of Home2 from ...
    (microsoft.public.windowsxp.accessibility)