[Bug 876910] Re: When starting open ssh server without host keys in /etc/ssh/, the keys are not automatically generated.

Jon 876910 at bugs.launchpad.net
Mon Oct 17 23:27:30 UTC 2011


Hello Clint,

>> sshd is no longer started and/or stopped with /etc/init.d/ssh unless you are running inside a chroot.
I'm new to upstart, so forgive my ignorance, but I thought upstart still used the init scripts to start and/or stop the jobs.

>> The host keys are typically generated in the postinstall script of openssh-server.
I think this may be the issue.

>> So if you don't have keys, its likely that something went wrong during that process.
Well, I suppose this is true, but in this particular case, I intentionally remove them as a final step to prepare a base image for use with QEMU-KVM.  It is a security concern to have multiple guest VMs all running with the same SSH key. 

>> Try this to remedy the situation.
>> sudo apt-get install openssh-server --reinstall
Two things,

1) Why not: 
dpkg-reconfigure openssh-server
As this seems to be a more direct route?  Again, maybe I'm not seeing all of the pieces.

2) In the Development environment both of these solutions will work,
however, this is not scalable and is not a viable solution in a
production environment.

Thanks for your quick response.  As is my experience with other non-
upstart distros, SSH automatically creates these host keys if they don't
exist, it is my strong personal belief that Ubuntu should not deviate
from the norm for two reasons, first to remain consistent with 'Linux'
(other distros) , and second so I can present a viable solution to my
management using an Ubuntu platform. Please let me know if you think I'm
way off here, I really do appreciate the assistance.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/876910

Title:
  When starting open ssh server without host keys in /etc/ssh/, the keys
  are not automatically generated.

Status in “openssh” package in Ubuntu:
  Incomplete

Bug description:
  System Information
  1) lsb_release -rd
  Description:    Ubuntu 11.10
  Release:        11.10

  SSH Version
  2) apt-cache policy openssh-server
  openssh-server:
    Installed: 1:5.8p1-7ubuntu1
    Candidate: 1:5.8p1-7ubuntu1
    Version table:
   *** 1:5.8p1-7ubuntu1 0
          500 http://us.archive.ubuntu.com/ubuntu/ oneiric/main amd64 Packages
          100 /var/lib/dpkg/status

  Expected Behavior:
  3) SSH should automatically create host keys when it detect the host keys are not present in /etc/ssh

  Observed Behavior:
  4) SSH did not generate host keys

  Solution:
  5) Created the attached patch to resolve the issue locally.  Presented as a solution to the problem.
  -- Check for existence of /etc/ssh/*_host_*
  -- create host keys unless exists

  ProblemType: Bug
  DistroRelease: Ubuntu 11.10
  Package: openssh-server 1:5.8p1-7ubuntu1
  ProcVersionSignature: Ubuntu 3.0.0-12.20-server 3.0.4
  Uname: Linux 3.0.0-12-server x86_64
  ApportVersion: 1.23-0ubuntu3
  Architecture: amd64
  Date: Mon Oct 17 16:12:28 2011
  InstallationMedia: Ubuntu-Server 11.10 "Oneiric Ocelot" - Release amd64 (20111011)
  ProcEnviron:
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: openssh
  UpgradeStatus: No upgrade log present (probably fresh install)
  mtime.conffile..etc.init.d.ssh: 2011-10-17T15:57:55.578332

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/876910/+subscriptions




More information about the foundations-bugs mailing list