[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ssh regenerated moduli file much smaller than the one provided by Debian



	Hi.

On Sun, 21 Feb 2016 02:29:01 +0100
arian <debian@semioptimal.net> wrote:

> > Because you can install ssh client without a server, but a
> > ssh server without a client on the same host is not of much use to
> > anyone.
> 
> Is that so? I have a couple of hosts where I cannot remember runner ssh myself ever. Actually more than hosts without sshd (only one)

It boils down to ssh-keygen actually.
It's impossible to connect to ssh daemon if it's missing host keys
from /etc/ssh.
The only sane way of getting those host keys is to generate them before
first launch of sshd.
In Debian such generation is handled by openssh-server postinst script,
and it involves ssh-keygen.
ssh-keygen is a part of openssh-client.

Reco


Reply to: