Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 May 2001 21:33:40 +0100
From:      Brian Somers <brian@Awfulhak.org>
To:        Jesper Skriver <jesper@skriver.dk>
Cc:        "David O'Brien" <obrien@freebsd.org>, Brian Somers <brian@Awfulhak.org>, green@freebsd.org, cvs-committers@freebsd.org, cvs-all@freebsd.org, brian@Awfulhak.org
Subject:   Re: cvs commit: src/etc rc.network 
Message-ID:  <200105182033.f4IKXeb00641@hak.lan.Awfulhak.org>
In-Reply-To: Message from Jesper Skriver <jesper@skriver.dk>  of "Fri, 18 May 2001 18:18:33 %2B0200." <20010518181833.A56160@skriver.dk> 

next in thread | previous in thread | raw e-mail | index | archive | help
> On Thu, May 17, 2001 at 01:45:57PM -0700, David O'Brien wrote:
> > On Thu, May 17, 2001 at 08:23:14PM +0100, Brian Somers wrote:
> > > The change was to copy /etc/ssh/ssh_host_key* to 
> > > /etc/ssh/ssh_host_rsa_key*.  The only reason this is necessary is 
> > > because the latest version of sshd_config says
> > > 
> > > HostKey /etc/ssh/ssh_host_key
> > > HostKey /etc/ssh/ssh_host_rsa_key
> > > HostKey /etc/ssh/ssh_host_dsa_key
> > > 
> > > where the middle line is new.  I'm arguing that the correct change is 
> > > to take that middle line out.  I don't think creating ssh_host_rsa_key 
> > > on the fly gains anything whatsoever.
> > 
> > You may have the best fix.  Green is being quiet on this for some reason.
> > Brian?
> 
> Fine with me, then rc.network should create /etc/ssh/ssh_host_key again
> instead of /etc/ssh/ssh_host_rsa_key

I think so.

The alternative would be to simply fail to run sshd, sending mail to 
root that says ``please rename ssh_host_key to ssh_host_rsa_key, but 
I'm not too sure that people would be happy with that :*I

> /Jesper
> 
> -- 
> Jesper Skriver, jesper(at)skriver(dot)dk  -  CCIE #5456
> Work:    Network manager   @ AS3292 (Tele Danmark DataNetworks)
> Private: FreeBSD committer @ AS2109 (A much smaller network ;-)
> 
> One Unix to rule them all, One Resolver to find them,
> One IP to bring them all and in the zone to bind them.

-- 
Brian <brian@Awfulhak.org>                        <brian@[uk.]FreeBSD.org>
      <http://www.Awfulhak.org>;                   <brian@[uk.]OpenBSD.org>
Don't _EVER_ lose your sense of humour !



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200105182033.f4IKXeb00641>