ssh-hostkey
Posted: 13 Jul 2009, 13:11
Hi,
On my b2 when restoring the system from the usb-stick, the ssh hostkey is always the same. I don't know if the key is the same on every usb-stick. If so, it would be easy to perform a man-in-the-middle attack on each b2-system with the well known ssh-hostkey.
A new key should be created during every b2 installation, i think.
For me these lines worked to create new host keys:
ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key
regards,
melzus
On my b2 when restoring the system from the usb-stick, the ssh hostkey is always the same. I don't know if the key is the same on every usb-stick. If so, it would be easy to perform a man-in-the-middle attack on each b2-system with the well known ssh-hostkey.
A new key should be created during every b2 installation, i think.
For me these lines worked to create new host keys:
ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key
regards,
melzus