Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Feb 2001 08:55:31 -0600
From:      "Darryl Hoar" <darryl@osborne-ind.com>
To:        "'Kris Kennaway'" <kris@obsecurity.org>
Cc:        <freebsd-questions@freebsd.org>
Subject:   RE: sshd -continued
Message-ID:  <002b01c0904c$daba2380$0701a8c0@darryl>
In-Reply-To: <20010205195920.A82933@mollari.cthul.hu>

next in thread | previous in thread | raw e-mail | index | archive | help
FreeBSD 4.0-Release.

I went into /usr/ports/security/rsaref.  Then
did a make.  It fetched the tarball, and 
compiled it.  I then did a make install, which
seems to install it.

Tried putty, and nothing.  Did I miss a step.
here's what I have done:

1.  enable_sshd="YES"  in /etc/rc.conf.
2.  when server starts, it says it makes the host keys.
3.  logged in as myself.  ran ssh-keygen.  It prompted
    for passphrase and other info.  it created /home/darryl/.ssh
    and put idenitity and idenitity.pub in that directory.
4.  Installed putty on win32 box.
5.  Tried connection, no joy.
6.  downloaded puttygen, and created an RSA key pair on win32 box.
7.  Tried connected to freebsd host, no joy.
8.  ftp'd the identity.pub file to my win32 box.
9.  loaded that key into putty.
10. tried connection, no joy.
11. Installed rsaref on freebsd box.
12. Tried connection, no joy.

what step am I missing ?
thanks,
Darryl  

-----Original Message-----
From: Kris Kennaway [mailto:kris@obsecurity.org]
Sent: Monday, February 05, 2001 9:59 PM
To: Darryl Hoar
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: sshd -continued


On Mon, Feb 05, 2001 at 04:22:17PM -0600, Darryl Hoar wrote:

> I then started putty on my win32 box, specified my sshd hostname,
> and ... nothing.  On the Freebsd box, I received:  fatal
> rsa_private_decrypt()
> failed.  I tried generating a RSA key with putty, and using that.  Same
> problem.

On FreeBSD 4.0-RELEASE you need to either install the rsaref2 port, or
be using crypto from an "international" source. Due to patent
restrictions which were in force at that time we couldn't ship RSA
code in the base system. This was fixed with the expiry of the RSA
patent in September, coinciding with the release of 4.1.1.

Kris


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002b01c0904c$daba2380$0701a8c0>