openssh unix dev - Apr 2005 - OpenSSH ssh-keygen and sshd won't work

Hi

I've Problems with my openssh installation on AIX 5.2.
My ssh-keygen and sshd won't work.
The Installation of AIX was proper migrated from aix4.3.3 to aix5.2

openssl-0.9.6m-1
openssl-devel-0.9.6m-1
openssl-doc-0.9.6m-1
openssh.base 3.7.0.5200

I had some Problem with the openssl Installation but with that was a
Problem in the rpm Database. ( /usr/sbin/updtvpkg )
lppchk -vm3 -> ok
# rpm -V openssl-0.9.6m-1 openssl-devel-0.9.6m-1 openssl-doc-0.9.6m-1 -> ok

During the Installation of the Paket the post Installation Script will
generate the ssh keys.

# /usr/bin/ssh-keygen -q -t rsa -f /etc/ssh/ssh_host_rsa_key -C
^C ( after 10 Minutes ;-> )

# ps -ef | grep ssh
root 2937002 2973824 0 09:02:04 pts/1 0:00 /usr/bin/ksh
./openssh.base.server.post_i
root 2957378 2031630 1 09:03:36 pts/4 0:00 grep ssh
root 2990158 2937002 0 09:02:04 pts/1 0:00 /usr/bin/ssh-keygen -q -t rsa -f
/etc/ssh/ssh_host_rsa_key -C



# for i  in /usr/lib /lib /usr/local/lib
/opt/freeware/lib;do
> find $i -name *ssl*
> done
/usr/lib/boot/bin/lsslot_chrp_pci
/usr/lib/boot/bin/lsslot_chrp_slot
/usr/lib/boot/bin/lsslot_chrp_phb
find: 0652-019 The status on /usr/local/lib is not valid.
/opt/freeware/lib/libssl.a
/opt/freeware/lib/libssl-static.a

# ls -la /opt/freeware/lib/libssl.a /opt/freeware/lib/libssl-static.a
-rw-r--r--   1 root     system       823749 Mar 18 2004
/opt/freeware/lib/libssl-static.a
-rwxr-xr-x   1 root     system       824998 Mar 18 2004
/opt/freeware/lib/libssl.a

They looks the same as on all other Machines.....

I check the SSL Headers with the Script distributed by openssh in
contrib/aix

# ./findssl.sh
Searching for OpenSSL header files.
0x009060dfL /opt/freeware/include/openssl/opensslv.h

Searching for OpenSSL shared library files.

Searching for OpenSSL static library files.

rschubnell at paninfo.com wrote:
> I've Problems with my openssh installation on AIX 5.2.
> My ssh-keygen and sshd won't work.
> The Installation of AIX was proper migrated from aix4.3.3 to aix5.2
[...]
> # /usr/bin/ssh-keygen -q -t rsa -f /etc/ssh/ssh_host_rsa_key -C
> ^C ( after 10 Minutes ;-> )
Sounds like a problem with the entropy source.  AIX 5.2 has /dev/random 
and /dev/urandom, but I have seen one report about an AIX upgrade 
leaving those with incorrect permissions, I suggest you check those 
first.  They should be:

$ ls -l /dev/*rand*
crw-r--r--   1 root  system   42,  0 Jul 01 2003  /dev/random
crw-r--r--   1 root  system   42,  1 Jul 01 2003  /dev/urandom

Failing that, does "openssl rand -base64 32" also hang?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.