| To: | openssh-unix-dev@mindrot.org |
|---|---|
| Subject: | Move servers public/private keys to a new host |
| From: | petesea@bigfoot.com |
| Date: | Mon, 22 Jan 2007 19:22:03 -0800 (Pacific Standard Time) |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | openssh-unix-dev-list1@securepoint.com |
| Delivered-to: | openssh-unix-dev-tmda@mindrot.org |
| Delivered-to: | openssh-unix-dev@mindrot.org |
| List-archive: | <http://lists.mindrot.org/pipermail/openssh-unix-dev> |
| List-help: | <mailto:openssh-unix-dev-request@mindrot.org?subject=help> |
| List-id: | Development of portable OpenSSH <openssh-unix-dev.mindrot.org> |
| List-post: | <mailto:openssh-unix-dev@mindrot.org> |
| List-subscribe: | <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=subscribe> |
| List-unsubscribe: | <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=unsubscribe> |
| Sender: | openssh-unix-dev-bounces+openssh-unix-dev-list1=securepoint.com@mindrot.org |
Is it possible to move a server's public and private keys from one host to
another? Or perhaps a better way to ask what I really want... is it
possible to configure a server on a new host to return the same public key
it did on the old host?
I'm in the process of migrating our CVS server from a Solaris host to a
Linux host (this weekend) and I just realized the hostkey is going to
change.
I tried copying the old host's pub/priv keys to the new host, but when I
start sshd on the new host (using -ddd) I get:
debug3: Not a RSA1 key file /usr/local/etc/ssh/old_ssh_host_rsa_key
debug1: PEM_read_PrivateKey failed
debug1: read PEM private key done: type <unknown>
Could not load host key: /usr/local/etc/ssh/old_ssh_host_rsa_key
The biggest problem is with all our Windows users. Since they only use
SSH (really plink) for CVS access, the CVS command fails if plink detects
the hostkey has changed. This is really because the cvs command will fail
if it gets ANY response it doesn't understand.
Many (most) of our Windows users use various GUI CVS clients that often
hide any output plink might display, but even if they DO happen to see any
output, 99% wouldn't know what to do based on the error.
I'm trying to avoid a barrage of tech support calls the day after the
server changes.
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: nologin not working with openssh >= 4.3 and authentication != password, Damien Miller |
|---|---|
| Next by Date: | Re: Move servers public/private keys to a new host, chris rapier |
| Previous by Thread: | remote port forwarding with dynamic port on the far end, Latchesar Ionkov |
| Next by Thread: | Re: Move servers public/private keys to a new host, chris rapier |
| Indexes: | [Date] [Thread] [Top] [All Lists] |