[Bug 230174] Re: [Gutsy] ssh installation results in COMPROMISED keys

2008-06-11 Thread web_rebe
Hi there. Since I had the same problem and didn't find a complete Solution on the Net. So, I wanted to share my solution with other people having this problem. The Problem is: I am running a dapper version of Ubuntu. Since some piece of software (e.g. Nagios2) requires a newer version, someone a

[Bug 230174] Re: [Gutsy] ssh installation results in COMPROMISED keys

2008-05-15 Thread NoOp
Per Chris K. Jester-Young's suggestion, I downloaded and manually installed: libssl0.9.8_0.9.8e-5ubuntu3.2_i386.deb That resolved the problem and I now show: $ sudo apt-get install ssh [sudo] password for: Reading package lists... Done Building dependency tree Reading state informatio

[Bug 230174] Re: [Gutsy] ssh installation results in COMPROMISED keys

2008-05-14 Thread Chris K. Jester-Young
First, because you have a custom non-gutsy libssl0.9.8, I think this establishes the non-bugness of this report. I would suggest to the owner of this bug ticket that this be turned into a help request instead. In response to the rest of the message: the 5ubuntu3.1 version no longer exists in the s

Re: [Bug 230174] Re: [Gutsy] ssh installation results in COMPROMISED keys

2008-05-14 Thread NoOp
On 05/14/2008 06:23 PM, Chris K. Jester-Young wrote: > What version of libssl0.9.8 do you have installed? If older than 0.9.8e- > 5ubuntu3.2 (such as if you have 0.9.8e-5ubuntu3) you will continue to > generate bad keys. This is irrespective of what version of openssh- > server you have, which only

[Bug 230174] Re: [Gutsy] ssh installation results in COMPROMISED keys

2008-05-14 Thread Chris K. Jester-Young
What version of libssl0.9.8 do you have installed? If older than 0.9.8e- 5ubuntu3.2 (such as if you have 0.9.8e-5ubuntu3) you will continue to generate bad keys. This is irrespective of what version of openssh- server you have, which only adds checks for vulnerable keys, and does not affect key gen

Re: [Bug 230174] Re: [Gutsy] ssh installation results in COMPROMISED keys

2008-05-14 Thread NoOp
On 05/14/2008 09:17 AM, Kees Cook wrote: > Is it possible you did not install the updated openssl package before > installing ssh? This could cause ssh to regenerate bad keys. Please see the file that was attached: http://launchpadlibrarian.net/14507701/sshinstall.txt -- [Gutsy] ssh installati

[Bug 230174] Re: [Gutsy] ssh installation results in COMPROMISED keys

2008-05-14 Thread Kees Cook
Is it possible you did not install the updated openssl package before installing ssh? This could cause ssh to regenerate bad keys. ** Changed in: openssh (Ubuntu) Assignee: (unassigned) => Kees Cook (keescook) Status: New => Incomplete -- [Gutsy] ssh installation results in COMPROMI

[Bug 230174] Re: [Gutsy] ssh installation results in COMPROMISED keys

2008-05-14 Thread NoOp
** Visibility changed to: Public -- [Gutsy] ssh installation results in COMPROMISED keys https://bugs.launchpad.net/bugs/230174 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openssh in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-