From owner-freebsd-bugs Wed Apr 10 5:20:10 2002 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 5F01B37B416 for ; Wed, 10 Apr 2002 05:20:03 -0700 (PDT) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.6/8.11.6) id g3ACK3f63488; Wed, 10 Apr 2002 05:20:03 -0700 (PDT) (envelope-from gnats) Date: Wed, 10 Apr 2002 05:20:03 -0700 (PDT) Message-Id: <200204101220.g3ACK3f63488@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: Joshua Goodall Subject: Re: conf/36894: Generate SSH2 RSA host key Reply-To: Joshua Goodall Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The following reply was made to PR conf/36894; it has been noted by GNATS. From: Joshua Goodall To: freebsd-gnats-submit@FreeBSD.org, anders@fix.no Cc: des@freebsd.org Subject: Re: conf/36894: Generate SSH2 RSA host key Date: Wed, 10 Apr 2002 22:16:22 +1000 Previous ssh configuration, preserved in -stable, was to not include a host RSA key. This changed with the import of OpenSSH v3.1, and the regularisation of the sshd_config file (to contain all defaults, but largely commented out.) With that in mind, and with a preference for preserving existing policy - I'd suggest the diff below as an alternative. Index: crypto/openssh/servconf.c =================================================================== RCS file: /cvs/src/crypto/openssh/servconf.c,v retrieving revision 1.26 diff -u -r1.26 servconf.c --- crypto/openssh/servconf.c 26 Mar 2002 12:27:43 -0000 1.26 +++ crypto/openssh/servconf.c 10 Apr 2002 11:57:27 -0000 @@ -122,12 +122,9 @@ if (options->protocol & SSH_PROTO_1) options->host_key_files[options->num_host_key_files++] = _PATH_HOST_KEY_FILE; - if (options->protocol & SSH_PROTO_2) { - options->host_key_files[options->num_host_key_files++] = - _PATH_HOST_RSA_KEY_FILE; + if (options->protocol & SSH_PROTO_2) options->host_key_files[options->num_host_key_files++] = _PATH_HOST_DSA_KEY_FILE; - } } if (options->num_ports == 0) options->ports[options->num_ports++] = SSH_DEFAULT_PORT; To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message