How did I Break ssh?

Martin McCormick martin at dc.cis.okstate.edu
Thu Mar 27 19:48:50 PST 2003


	Every attempt to connect to anything from a new FreeBSD
system results in a "host key verification failed."

	ssh 127.0.0.1 even fails this way.

	I started with a new FreeBSD4.7 installation and
un-tarred the contents of another 4.7 system to essentially clone
this one.

	My tar ball purposefully did not have the /etc/ssh
directory in it so as to not overwrite any of the files in the
new installation so I ended up with all the proper key files like
I should.

	I can successfully connect to the system from remote hosts
so sshd is working.  I even regenerated my own host key with
ssh-keygen -tdsa and that worked.

	Is there anywhere else besides my directory and /etc/ssh
I should look to see what got clobbered?

	It worked fine before I unpacked the tar ball.  I even
deliberately deleted all the host keys in /etc/ssh and made it
regenerate new ones.  Other than the expected effect of causing
the remote systems to complain about the host identity changing,
nothing else happened.

Martin McCormick WB5AGZ  Stillwater, OK 
OSU Center for Computing and Information Services Network Operations Group


More information about the freebsd-security mailing list