2002-Jun-25

OpenSSH has flaw to be announced soon. Updated Debian with security packages. Supposedly the dpkg script made new config and made keys; dpkg (apt-get) ended with:

Installing new version of config file /etc/ssh/ssh_config ...
Installing new version of config file /etc/init.d/ssh ...
Installing new version of config file /etc/pam.d/ssh ...
Creating SSH2 RSA key
Creating SSH2 DSA key
Restarting OpenBSD Secure Shell server: sshdstart-stop-daemon:
warning: failed to kill 191: No such proc

Then:

$ /etc/init.d/ssh restart
Could not load host key: /etc/ssh/ssh_host_key
Could not load host key: /etc/ssh/ssh_host_rsa_key
Could not load host key: /etc/ssh/ssh_host_dsa_key
Disabling protocol version 1. Could not load host key
Disabling protocol version 2. Could not load host key
sshd: no hostkeys available -- exiting.

sshd is running though. And logging into it now says:

Enabling compatibility mode for protocol 2.0

I am not sure why it had those errors above.

I don't see any backups of previous ssh configs in /etc/ssh. (But I did have my own backup.)

/var/cache/apt/archives/ has old (and recent) downloaded deb packages. I used "apt-get autoclean" to clean up -- this removed useless package files (no longer available or needed). You can set up /etc/apt/apt.conf do this automatically. It is suggested to run "apt-get clean" ever so often -- it clears out all packages.