From owner-svn-src-all@freebsd.org Thu Feb 4 23:57:12 2016 Return-Path: Delivered-To: svn-src-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8DA9AA9BA81; Thu, 4 Feb 2016 23:57:12 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) by mx1.freebsd.org (Postfix) with ESMTP id 7CC81188A; Thu, 4 Feb 2016 23:57:12 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from mail.xzibition.com (localhost [IPv6:::1]) by freefall.freebsd.org (Postfix) with ESMTP id 7484C1B12; Thu, 4 Feb 2016 23:57:12 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from mail.xzibition.com (localhost [172.31.3.2]) by mail.xzibition.com (Postfix) with ESMTP id 19A3119B2A; Thu, 4 Feb 2016 23:57:12 +0000 (UTC) X-Virus-Scanned: amavisd-new at mail.xzibition.com Received: from mail.xzibition.com ([172.31.3.2]) by mail.xzibition.com (mail.xzibition.com [172.31.3.2]) (amavisd-new, port 10026) with LMTP id KHu0LfPDWEWm; Thu, 4 Feb 2016 23:57:05 +0000 (UTC) Subject: Re: svn commit: r294560 - head/etc/rc.d DKIM-Filter: OpenDKIM Filter v2.9.2 mail.xzibition.com 2234919B23 To: =?UTF-8?Q?Dag-Erling_Sm=c3=b8rgrav?= , src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org References: <201601221214.u0MCE8Jk054031@repo.freebsd.org> <56B3DE8E.9020603@FreeBSD.org> From: Bryan Drewery Openpgp: id=F9173CB2C3AAEA7A5C8A1F0935D771BB6E4697CF; url=http://www.shatow.net/bryan/bryan2.asc Organization: FreeBSD Message-ID: <56B3E55F.3040004@FreeBSD.org> Date: Thu, 4 Feb 2016 15:57:19 -0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56B3DE8E.9020603@FreeBSD.org> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="T0dgwd6kDQjgSDId7KSj1S63J6VPp2SfG" X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Feb 2016 23:57:12 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --T0dgwd6kDQjgSDId7KSj1S63J6VPp2SfG Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 2/4/2016 3:28 PM, Bryan Drewery wrote: > On 1/22/2016 4:14 AM, Dag-Erling Sm=C3=B8rgrav wrote: >> Author: des >> Date: Fri Jan 22 12:14:08 2016 >> New Revision: 294560 >> URL: https://svnweb.freebsd.org/changeset/base/294560 >> >> Log: >> Do not generate RSA1 or DSA keys by default. >> >> Modified: >> head/etc/rc.d/sshd >> >> Modified: head/etc/rc.d/sshd >> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >> --- head/etc/rc.d/sshd Fri Jan 22 12:00:56 2016 (r294559) >> +++ head/etc/rc.d/sshd Fri Jan 22 12:14:08 2016 (r294560) >> @@ -20,9 +20,9 @@ configtest_cmd=3D"sshd_configtest" >> pidfile=3D"/var/run/${name}.pid" >> extra_commands=3D"configtest keygen reload" >> =20 >> -: ${sshd_rsa1_enable:=3D"yes"} >> +: ${sshd_rsa1_enable:=3D"no"} >> : ${sshd_rsa_enable:=3D"yes"} >> -: ${sshd_dsa_enable:=3D"yes"} >> +: ${sshd_dsa_enable:=3D"no"} >> : ${sshd_ecdsa_enable:=3D"yes"} >> : ${sshd_ed25519_enable:=3D"yes"} >> =20 >> >=20 > I think perhaps you should also remove these as having default paths in= > the .c as well and require they be enabled in the config. Otherwise a > warning is given: >=20 > Feb 4 15:25:22 VM sshd[874]: error: Could not load host key: > /etc/ssh/ssh_host_dsa_key This happens on every login even. It's quite annoying. >=20 > Or always generate them but only load them if enabled in the config. >=20 --=20 Regards, Bryan Drewery --T0dgwd6kDQjgSDId7KSj1S63J6VPp2SfG Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJWs+VgAAoJEDXXcbtuRpfP5tgIAJ2JsPsm3lvBCrFwE6We1Yun lDkzJMA1TM1k14X0ZLwh5/1wCSmuzqq80ncTAOtTzMlduD80JqWzALdcYXdoJcfO D1VM5+k4VZBriyGFaC2xlb45By6SGgXzXITGNKhyxupDNdsn/Uv9dPgKOkOvc8c0 93RtoRf0JYEGlHJ3Zbchc2zowCY1zh/XmE7FKZYYq/iJ6JF0cVaZ6IWCmFES1tfH PYGZxC91voY5CKxx1F6lO6Zj+PkEW6eI1ervjT3RIUiVfypFpgeFD5npY+QRYlWz fHksuC6sFfVALcNNbISeQ/2FuBLUUDk09EbX8vPJIfylCgcOQ6xDnnDSh28HsWE= =HkAm -----END PGP SIGNATURE----- --T0dgwd6kDQjgSDId7KSj1S63J6VPp2SfG--