view all posts by Greg Lehey

ssh POLA violation

Greg Lehey Posted by Greg Lehey | Mon, 17 Sep 2012
see the original posting from Greg's diary

One of the problems I had with avidemux2 was that it wasn't installed on lagoon, Yvonne's computer, and it's so down-rev that I can't install it. So we ran it on eureka. But she couldn't connect: eureka refused her ssh keys. Regenerated them, but no luck:

Sep 16 14:16:19 eureka sshd[213]: error: Could not load host key: /etc/ssh/ssh_host_ecdsa_key

What's that? I've never had that before, and it didn't happen when I tried accessing with my credentials. Searched on the web and found a large number of hits, mainly from Linux. But this one related directly to my situation: upgrade from FreeBSD 8 to 9. And it worked, though the answer they gave was truncated. It's as simple as:

=== root@eureka (/dev/pts/23) ~ 31 -> ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ""
=== root@eureka (/dev/pts/23) ~ 32 -> /etc/rc.d/sshd restart

What puzzles me is that this only affected Yvonne, and not me.


see the original posting from Greg's diary

Back to top