From owner-freebsd-bugs  Wed Jun 21 21:30: 6 2000
Delivered-To: freebsd-bugs@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP id E8C8B37C15E
	for <freebsd-bugs@FreeBSD.org>; Wed, 21 Jun 2000 21:30:00 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id VAA24555;
	Wed, 21 Jun 2000 21:30:00 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: from ns.itga.com.au (ns.itga.com.au [202.53.40.210])
	by hub.freebsd.org (Postfix) with ESMTP id B958F37C053
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 21 Jun 2000 21:24:37 -0700 (PDT)
	(envelope-from gnb@itga.com.au)
Received: from lightning.itga.com.au (lightning.itga.com.au [192.168.71.20])
	by ns.itga.com.au (8.9.3/8.9.3) with ESMTP id OAA82292
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 22 Jun 2000 14:24:33 +1000 (EST)
	(envelope-from gnb@itga.com.au)
Received: from hellcat.itga.com.au (hellcat.itga.com.au [192.168.71.163])
	by lightning.itga.com.au (8.9.3/8.9.3) with ESMTP id OAA29966;
	Thu, 22 Jun 2000 14:24:33 +1000 (EST)
Received: (from gnb@localhost)
	by hellcat.itga.com.au (8.9.3/8.9.3) id OAA00436;
	Thu, 22 Jun 2000 14:24:33 +1000 (EST)
	(envelope-from gnb@itga.com.au)
Message-Id: <200006220424.OAA00436@hellcat.itga.com.au>
Date: Thu, 22 Jun 2000 14:24:33 +1000 (EST)
From: Gregory Bond <gnb@itga.com.au>
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.2
Subject: conf/19431: rc.network wants to generate unsupported DSA key for SSH
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         19431
>Category:       conf
>Synopsis:       rc.network wants to generate unsupported DSA key for SSH
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jun 21 21:30:00 PDT 2000
>Closed-Date:
>Last-Modified:
>Originator:     Gregory Bond
>Release:        FreeBSD 4.0-STABLE i386
>Organization:
ITG Australia Limited
>Environment:

4.0-Stable, CVSup'd with crypto from internat.FreeBSD.org

>Description:

If enable_sshd is set in rc.conf, then rc.network will check if the 
host keys are present, and create them if not.  It tries to create
two host keys, an ordinary one and a DSA one.

My ssh-keygen (build from a buildworld with the international 
crypto source but no other known tweaks) doesn't have the required 
-d option for generating DSA keys.  This makes the boot give 
somewhat odd error messages.

>How-To-Repeat:

make update && make world && reboot

>Fix:

I don't know whether this is a simple bug in rc.network (in which case
the fix is simple), or if DSA is supported in the US version but not the
international version (which seems more likely).  In the latter case,
rc.network needs to be more careful about what it attempts to do.  
Should it grep USA_RESIDENT out of make.conf?  This is ugly, but I can't 
think of anything less ugly!


>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message