Tom Lynn wrote:
> Will this be done before or after the network is up?

Thats a good question. I think since its in the SSH init script it would
be done after.

I did play around with this and notice that the /stat filesystem was
already read only by the time this ran so it did not work. I managed to
hack around it. It appears if I mount the filesystem rw in the ssh init
script something else appears to clean it up for me and mount ro by the
time the system is done booting.

-ken

> 
> On 11/28/06, Ken Caruso <[EMAIL PROTECTED]> wrote:
>> Hello,
>>
>> I have a system without a USB key. I am contemplating changing the sshd
>> init script slightly to copy ssh keys when they are generated to
>> /stat/etc/ssh.
>>
>> It currently looks like this:
>>
>>
>> if [ ! -f /etc/ssh/ssh_host_key ]
>> then
>> cp -a /stat/etc/ssh/* /etc/ssh/
>> echo "generating ssh hostkeys..."
>> /usr/bin/ssh-keygen -t rsa1 -b 1024 -f /etc/ssh/ssh_host_key -N ''
>> /usr/bin/ssh-keygen -d -f /etc/ssh/ssh_host_dsa_key -N ''
>> /usr/bin/ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''
>> fi
>>
>>
>> I am thinking about changing it to:
>>
>> if [ ! -f /etc/ssh/ssh_host_key ]
>> then
>> cp -a /stat/etc/ssh/* /etc/ssh/
>> echo "generating ssh hostkeys..."
>> /usr/bin/ssh-keygen -t rsa1 -b 1024 -f /etc/ssh/ssh_host_key -N ''
>> /usr/bin/ssh-keygen -d -f /etc/ssh/ssh_host_dsa_key -N ''
>> /usr/bin/ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''
>> cp -a /etc/ssh/ssh_host_dsa_key.pub /stat/etc/ssh/
>> cp -a /etc/ssh/ssh_host_dsa_key /stat/etc/ssh/
>> cp -a /etc/ssh/ssh_host_key.pub /stat/etc/ssh/
>> cp -a /etc/ssh/ssh_host_key /stat/etc/ssh/
>> cp -a /etc/ssh/ssh_host_rsa_key.pub /stat/etc/ssh/
>> cp -a /etc/ssh/ssh_host_rsa_key /stat/etc/ssh/
>> fi
>>
>> So if they keys are generated they are copied to /stat/etc/ssh so
>> keep after a reboot. Any potential problems this might cause?
>>
>> Thanks
>>
>> -Ken
>> _______________________________________________
>> Astlinux-users mailing list
>> [email protected]
>> http://lists.kriscompanies.com/mailman/listinfo/astlinux-users
>>
>> Donations to support AstLinux are graciously accepted via PayPal to [EMAIL 
>> PROTECTED]
>>
> _______________________________________________
> Astlinux-users mailing list
> [email protected]
> http://lists.kriscompanies.com/mailman/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to [EMAIL 
> PROTECTED]

_______________________________________________
Astlinux-users mailing list
[email protected]
http://lists.kriscompanies.com/mailman/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to [EMAIL 
PROTECTED]

Reply via email to