Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Dec 2001 22:21:06 +0100
From:      "Rick Hoppe" <mailing@rickhoppe.nl>
To:        "Johann Sharizan" <johann@broadpark.no>
Cc:        <freebsd-questions@FreeBSD.ORG>
Subject:   RE: OpenSSH -- Make up your mind!
Message-ID:  <MLECKHBMGODPBDHNOIAAAEPBCCAA.mailing@rickhoppe.nl>
In-Reply-To: <20011227153102.F11529-100000@shumai.marcuscom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> On Thu, 27 Dec 2001, Johann Sharizan wrote:
>
> > Hi.
> >
> > I recently installed the newest port of OpenSSH for security reasons,
> > after having manually deleted all traces of the old one.
> >
> > After the installation the new config files could be found in
> > /usr/local/etc. SSHD, however, complained it couldn't find
> sshd_config in
> > /etc/ssh. So I went ahead and moved them all from
> /usr/local/etc to /etc/ssh. But now, SSHD brings me this output,
> requiring a non-existent file:
> >
> > Could not load host key: /etc/ssh/ssh_host_rsa_key
> >
> > I'm utterly confused.
>
> OpenSSH (and SSH in general) requires you to generate keys before you can
> run the server.  Normally, FreeBSD does this the first time it boots up.
> Have a look at the ssh-keygen command and /etc/rc.network for an example.
>
> Joe
>
Johann,

You need to do what the ports installation of openssh (or openssh-portable)
probably told yo to do......

You need to add the following line to /etc/rc.conf
sshd_program="/usr/local/sbin/sshd"

Then automatically the keys and sshd_config files from /usr/local/etc are
used when you reboot your box. During the installation of the OpenSSH port,
those keys and config file were created.

It is also possible that your old sshd is still running. Make sure by
telnetting to port 22 to see wich version is listening for connections. If
the old version is still running, those errors are caused because by
deleting (almost) all traces of the old version.

/etc/rc.network indeed creates keys (when they're gone), but places them in
/etc/ssh/ and your new OpenSSH version is installed in /usr/local/sbin/ and
that uses the keys in /usr/local/etc. You may want to modify /etc/rc.network
so the keys will be recreated in /usr/local/etc when they're deleted for
some reason.

I hope this helps.

Regards,

Rick Hoppe
Network- and System Specialist (Jr.)
Xtraxion Internet



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?MLECKHBMGODPBDHNOIAAAEPBCCAA.mailing>