Displaying 6 results from an estimated 6 matches for "_path_host_rsa_key_file".
Did you mean:
_path_host_dsa_key_file
2001 Oct 24
3
Inconsistent server/client configuration
It appears somewhat inconsistent to me that parameter HostKey is configurable
on the server side but fixed on the client side.
On the client, always _PATH_HOST_KEY_FILE, _PATH_HOST_DSA_KEY_FILE,
_PATH_HOST_RSA_KEY_FILE are used (in this order), whereas on the server,
the paths can be specified by up to three HostKey options as arbitrary names
in arbitrary sequence.
Similarly, option GlobalKnownHostsFile is configurable for the client only
but fixed as _PATH_SSH_SYSTEM_HOSTFILE for the server. (Well, here the mean...
2007 Jan 08
0
How to remove group1 and group14 from OpenSSH..
..._need = buffer_get_int(m);
kex->kex[KEX_DH_GEX_SHA1] = kexgex_server;
kex->kex[KEX_DH_GEX_SHA256] = kexgex_server;
kex->server = 1;
TO REMOVE DSA HOST KEY
IN servconf.c
if (options->protocol & SSH_PROTO_2) {
options->host_key_files[options->num_host_key_files++] =
_PATH_HOST_RSA_KEY_FILE;
options->host_key_files[options->num_host_key_files++] =
_PATH_HOST_DSA_KEY_FILE;
}
CHANGE TO
if (options->protocol & SSH_PROTO_2) {
options->host_key_files[options->num_host_key_files++] =
_PATH_HOST_RSA_KEY_FILE;
}
/etc/rc
REMOVE LINES ABOUT GENERATING THE UNW...
2003 Nov 27
2
Question about adding another parameter for OpenSSH
...NULL, options.group_private_key);
sensitive_data.keys[1] = key_load_private_type(KEY_DSA,
- _PATH_HOST_DSA_KEY_FILE, "", NULL);
+ _PATH_HOST_DSA_KEY_FILE, "", NULL,
+ options.group_private_key);
sensitive_data.keys[2] = key_load_private_type(KEY_RSA,
- _PATH_HOST_RSA_KEY_FILE, "", NULL);
+ _PATH_HOST_RSA_KEY_FILE, "", NULL,
+ options.group_private_key);
PRIV_END;
if (options.hostbased_authentication == 1 &&
--- ssh_config.5.orig Thu Nov 27 17:40:32 2003
+++ ssh_config.5 Thu Nov 27 18:03:02 2003
@@ -349,6 +349,15 @@
Specifie...
2011 May 03
0
Revised: Portable OpenSSH security advisory: portable-keysign-rand-helper.adv
...===================================
RCS file: /var/cvs/openssh/ssh-keysign.c,v
retrieving revision 1.43
diff -u -p -r1.43 ssh-keysign.c
--- ssh-keysign.c 10 Sep 2010 01:12:09 -0000 1.43
+++ ssh-keysign.c 29 Apr 2011 01:25:55 -0000
@@ -167,6 +167,9 @@ main(int argc, char **argv)
key_fd[0] = open(_PATH_HOST_RSA_KEY_FILE, O_RDONLY);
key_fd[1] = open(_PATH_HOST_DSA_KEY_FILE, O_RDONLY);
+ if (fcntl(key_fd[0], F_SETFD, FD_CLOEXEC) != 0 ||
+ fcntl(key_fd[1], F_SETFD, FD_CLOEXEC) != 0)
+ fatal("fcntl failed");
original_real_uid = getuid(); /* XXX readconf.c needs this */
if ((pw = getpwuid(origina...
2011 May 03
1
Revised: Portable OpenSSH security advisory: portable-keysign-rand-helper.adv
...===================================
RCS file: /var/cvs/openssh/ssh-keysign.c,v
retrieving revision 1.43
diff -u -p -r1.43 ssh-keysign.c
--- ssh-keysign.c 10 Sep 2010 01:12:09 -0000 1.43
+++ ssh-keysign.c 29 Apr 2011 01:25:55 -0000
@@ -167,6 +167,9 @@ main(int argc, char **argv)
key_fd[0] = open(_PATH_HOST_RSA_KEY_FILE, O_RDONLY);
key_fd[1] = open(_PATH_HOST_DSA_KEY_FILE, O_RDONLY);
+ if (fcntl(key_fd[0], F_SETFD, FD_CLOEXEC) != 0 ||
+ fcntl(key_fd[1], F_SETFD, FD_CLOEXEC) != 0)
+ fatal("fcntl failed");
original_real_uid = getuid(); /* XXX readconf.c needs this */
if ((pw = getpwuid(origina...
2001 Oct 16
6
program-prefix does not work
...orld-readable.
*/
! #define _PATH_SERVER_CONFIG_FILE ETCDIR "/sshd_config"
! #define _PATH_HOST_CONFIG_FILE ETCDIR "/ssh_config"
! #define _PATH_HOST_KEY_FILE ETCDIR "/ssh_host_key"
! #define _PATH_HOST_DSA_KEY_FILE ETCDIR "/ssh_host_dsa_key"
! #define _PATH_HOST_RSA_KEY_FILE ETCDIR "/ssh_host_rsa_key"
#define _PATH_DH_MODULI ETCDIR "/moduli"
/* Backwards compatibility */
#define _PATH_DH_PRIMES ETCDIR "/primes"
--- 20,45 ----
#define _PATH_SSH_PIDDIR "/var/run"
#endif
+ #ifndef _PROGRAM_PREFIX
+ #define _PRO...