Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Jun 2000 01:58:48 -0500
From:      Mike Pritchard <mpp@mppsystems.com>
To:        David Malone <dwmalone@maths.tcd.ie>
Cc:        freebsd-bugs@FreeBSD.ORG
Subject:   Re: conf/19431: rc.network wants to generate unsupported DSA key for SSH
Message-ID:  <20000622015848.B11875@mppsystems.com>
In-Reply-To: <200006220600.XAA45889@freefall.freebsd.org>; from dwmalone@maths.tcd.ie on Wed, Jun 21, 2000 at 11:00:04PM -0700
References:  <200006220600.XAA45889@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jun 21, 2000 at 11:00:04PM -0700, David Malone wrote:
>  On Thu, Jun 22, 2000 at 02:24:33PM +1000, Gregory Bond wrote:
>  
>  > I don't know whether this is a simple bug in rc.network (in which case
>  > the fix is simple), or if DSA is supported in the US version but not the
>  > international version (which seems more likely).  In the latter case,
>  > rc.network needs to be more careful about what it attempts to do.  
>  > Should it grep USA_RESIDENT out of make.conf?  This is ugly, but I can't 
>  > think of anything less ugly!
>  
>  I'm building from international crypto sources here, cvsuped indirectly
>  from cvsup.uk.FreeBSD.org and it built a DSA key fine. "ssh-keygen -d"
>  still seems to work too. Are you sure you have recent crypto sources?

I noticed a problem after upgrading a 4.0-something machine to 5.0-current.
I started getting errors starting sshd, complaining about the DSA host
key not being present.  I suspect that since I already had a ssh_host_key
present, it didn't try to generate the DSA key.

-Mike
-- 
Mike Pritchard
mpp@FreeBSD.org or mpp@mppsystems.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000622015848.B11875>