[PATCH] openssh: Create /etc/ssh/ssh_host_ecdsa_key if it doesn't exist

[PATCH] openssh: Create /etc/ssh/ssh_host_ecdsa_key if it doesn't exist

[Enric Balletbo i Serra]

From: Enric Balletbo i Serra <eballetbo@iseebcn.com>

After OpenSSH 5.7 the ECDSA is the preferred key algorithm when
both the client and server support it.

This patch solves the error that shows:

        Could not load host key: /etc/ssh_host_ecdsa_key

creating a ECDSA key if it doesn't exist.

Signed-off-by: Enric Balletbo i Serra <eballetbo@gmail.com>
---
 .../openssh/openssh-5.8p2/init                     |    4 ++++
 meta/recipes-connectivity/openssh/openssh_5.8p2.bb |    2 +-
 2 files changed, 5 insertions(+), 1 deletions(-)

diff --git a/meta/recipes-connectivity/openssh/openssh-5.8p2/init b/meta/recipes-connectivity/openssh/openssh-5.8p2/init
index b16cbd6..8145ec9 100644
--- a/meta/recipes-connectivity/openssh/openssh-5.8p2/init
+++ b/meta/recipes-connectivity/openssh/openssh-5.8p2/init
@@ -40,6 +40,10 @@ check_keys() {
 		echo "  generating ssh DSA key..."
 		ssh-keygen -q -f /etc/ssh/ssh_host_dsa_key -N '' -t dsa
 	fi
+	if [ ! -f /etc/ssh/ssh_host_ecdsa_key ]; then
+		echo "  generating ssh ECDSA key..."
+		ssh-keygen -q -f /etc/ssh/ssh_host_ecdsa_key -N '' -t ecdsa
+	fi
 }
 
 export PATH="${PATH:+$PATH:}/usr/sbin:/sbin"
diff --git a/meta/recipes-connectivity/openssh/openssh_5.8p2.bb b/meta/recipes-connectivity/openssh/openssh_5.8p2.bb
index 89b011d..030a83b 100644
--- a/meta/recipes-connectivity/openssh/openssh_5.8p2.bb
+++ b/meta/recipes-connectivity/openssh/openssh_5.8p2.bb
@@ -7,7 +7,7 @@ SECTION = "console/network"
 LICENSE = "BSD"
 LIC_FILES_CHKSUM = "file://LICENCE;md5=bae9a689be41581503bcf95d8fb42c4e"
 
-PR = "r1"
+PR = "r2"
 
 DEPENDS = "zlib openssl"
 DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
-- 
1.7.1

Re: [PATCH] openssh: Create /etc/ssh/ssh_host_ecdsa_key if it doesn't exist

[Martin Jansa]

[-- Attachment #1: Type: text/plain, Size: 380 bytes --]

On Thu, Sep 15, 2011 at 04:54:43PM +0200, Enric Balletbo i Serra wrote:
> From: Enric Balletbo i Serra <eballetbo@iseebcn.com>
> 
> After OpenSSH 5.7 the ECDSA is the preferred key algorithm when
> both the client and server support it.

Please use right mailing list for oe-core patches..
http://lists.linuxtogo.org/pipermail/openembedded-core/2011-September/009613.html

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 205 bytes --]

Re: [PATCH] openssh: Create /etc/ssh/ssh_host_ecdsa_key if it doesn't exist

[Enric Balletbò i Serra]

2011/9/15 Martin Jansa <martin.jansa@gmail.com>:
> On Thu, Sep 15, 2011 at 04:54:43PM +0200, Enric Balletbo i Serra wrote:
>> From: Enric Balletbo i Serra <eballetbo@iseebcn.com>
>>
>> After OpenSSH 5.7 the ECDSA is the preferred key algorithm when
>> both the client and server support it.
>
> Please use right mailing list for oe-core patches..
> http://lists.linuxtogo.org/pipermail/openembedded-core/2011-September/009613.html
>

Sorry, I missed this ML, I was subscribed to openembedded MLt but not
oe-core ML, lots of list and sometimes don't known where to send the
patches.

Best regards,
   Enric