[yocto] [PATCH] openssh: Create /etc/ssh/ssh_host_ecdsa_key if it doesn't exist

Enric Balletbo i Serra eballetbo at gmail.com
Thu Sep 15 07:54:43 PDT 2011


From: Enric Balletbo i Serra <eballetbo at iseebcn.com>

After OpenSSH 5.7 the ECDSA is the preferred key algorithm when
both the client and server support it.

This patch solves the error that shows:

        Could not load host key: /etc/ssh_host_ecdsa_key

creating a ECDSA key if it doesn't exist.

Signed-off-by: Enric Balletbo i Serra <eballetbo at gmail.com>
---
 .../openssh/openssh-5.8p2/init                     |    4 ++++
 meta/recipes-connectivity/openssh/openssh_5.8p2.bb |    2 +-
 2 files changed, 5 insertions(+), 1 deletions(-)

diff --git a/meta/recipes-connectivity/openssh/openssh-5.8p2/init b/meta/recipes-connectivity/openssh/openssh-5.8p2/init
index b16cbd6..8145ec9 100644
--- a/meta/recipes-connectivity/openssh/openssh-5.8p2/init
+++ b/meta/recipes-connectivity/openssh/openssh-5.8p2/init
@@ -40,6 +40,10 @@ check_keys() {
 		echo "  generating ssh DSA key..."
 		ssh-keygen -q -f /etc/ssh/ssh_host_dsa_key -N '' -t dsa
 	fi
+	if [ ! -f /etc/ssh/ssh_host_ecdsa_key ]; then
+		echo "  generating ssh ECDSA key..."
+		ssh-keygen -q -f /etc/ssh/ssh_host_ecdsa_key -N '' -t ecdsa
+	fi
 }
 
 export PATH="${PATH:+$PATH:}/usr/sbin:/sbin"
diff --git a/meta/recipes-connectivity/openssh/openssh_5.8p2.bb b/meta/recipes-connectivity/openssh/openssh_5.8p2.bb
index 89b011d..030a83b 100644
--- a/meta/recipes-connectivity/openssh/openssh_5.8p2.bb
+++ b/meta/recipes-connectivity/openssh/openssh_5.8p2.bb
@@ -7,7 +7,7 @@ SECTION = "console/network"
 LICENSE = "BSD"
 LIC_FILES_CHKSUM = "file://LICENCE;md5=bae9a689be41581503bcf95d8fb42c4e"
 
-PR = "r1"
+PR = "r2"
 
 DEPENDS = "zlib openssl"
 DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
-- 
1.7.1




More information about the yocto mailing list