| Paste number 60774: | ssh upgrade |
| Pasted by: | sm |
| 2 months, 3 weeks ago | |
| #zwiki | Context in IRC logs | |
| Paste contents: |
| Configuring openssh-server -------------------------- Vulnerable host keys will be regenerated Some of the OpenSSH server host keys on this system were generated with a version of OpenSSL that had a broken random number generator. As a result, these host keys are from a well-known set, are subject to brute-force attacks, and must be regenerated. Users of this system should be informed of this change, as they will be prompted about the host key change the next time they log in. Use 'ssh-keygen -l -f HOST_KEY_FILE' after the upgrade has changed to print the fingerprints of the new host keys. The affected host keys are: /etc/ssh/ssh_host_rsa_key /etc/ssh/ssh_host_dsa_key User keys may also be affected by this problem. The 'ssh-vulnkey' command may be used as a partial test for this. See /usr/share/doc/openssh-server/README.compromised-keys.gz for more details. Creating SSH2 RSA key; this may take some time ... Creating SSH2 DSA key; this may take some time ... * Restarting OpenBSD Secure Shell server sshd ...done. Setting up openssl-blacklist (0.1-0ubuntu0.7.10.1) ... Setting up ssl-cert (1.0.14-0ubuntu0.7.10.1) ... debconf: unable to initialize frontend: Dialog debconf: (Dialog frontend will not work on a dumb terminal, an emacs shell buffer, or without a controlling terminal.) debconf: falling back to frontend: Readline Configuring ssl-cert -------------------- Local security certificates must be replaced A security certificate which was automatically created for your local system needs to be replaced due to a flaw which renders it insecure. This will be done automatically. If you don't know anything about this, you can safely ignore this message. |
This paste has no annotations.