mirror of
git://anongit.mindrot.org/openssh.git
synced 2024-12-24 10:52:05 +00:00
0bc1bd814e
- markus@cvs.openbsd.org 2000/11/06 16:04:56 [channels.c channels.h clientloop.c nchan.c serverloop.c] [session.c ssh.c] agent forwarding and -R for ssh2, based on work from jhuuskon@messi.uku.fi - markus@cvs.openbsd.org 2000/11/06 16:13:27 [ssh.c sshconnect.c sshd.c] do not disabled rhosts(rsa) if server port > 1024; from pekkas@netcore.fi - markus@cvs.openbsd.org 2000/11/06 16:16:35 [sshconnect.c] downgrade client to 1.3 if server is 1.4; help from mdb@juniper.net - markus@cvs.openbsd.org 2000/11/09 18:04:40 [auth1.c] typo; from mouring@pconline.com - markus@cvs.openbsd.org 2000/11/12 12:03:28 [ssh-agent.c] off-by-one when removing a key from the agent - markus@cvs.openbsd.org 2000/11/12 12:50:39 [auth-rh-rsa.c auth2.c authfd.c authfd.h] [authfile.c hostfile.c kex.c kex.h key.c key.h myproposal.h] [readconf.c readconf.h rsa.c rsa.h servconf.c servconf.h ssh-add.c] [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config] [sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config ssh-dss.c] [ssh-dss.h ssh-rsa.c ssh-rsa.h dsa.c dsa.h] add support for RSA to SSH2. please test. there are now 3 types of keys: RSA1 is used by ssh-1 only, RSA and DSA are used by SSH2. you can use 'ssh-keygen -t rsa -f ssh2_rsa_file' to generate RSA keys for SSH2 and use the RSA keys for hostkeys or for user keys. SSH2 RSA or DSA keys are added to .ssh/authorised_keys2 as before. - (djm) Fix up Makefile and Redhat init script to create RSA host keys - (djm) Change to interim version
118 lines
2.1 KiB
Bash
Executable File
118 lines
2.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Init file for OpenSSH server daemon
|
|
#
|
|
# chkconfig: 2345 55 25
|
|
# description: OpenSSH server daemon
|
|
#
|
|
# processname: sshd
|
|
# config: /etc/ssh/ssh_host_key
|
|
# config: /etc/ssh/ssh_host_key.pub
|
|
# config: /etc/ssh/ssh_random_seed
|
|
# config: /etc/ssh/sshd_config
|
|
# pidfile: /var/run/sshd.pid
|
|
|
|
# source function library
|
|
. /etc/rc.d/init.d/functions
|
|
|
|
RETVAL=0
|
|
|
|
# Some functions to make the below more readable
|
|
KEYGEN=/usr/bin/ssh-keygen
|
|
RSA1_KEY=/etc/ssh/ssh_host_key
|
|
RSA_KEY=/etc/ssh/ssh_host_rsa_key
|
|
DSA_KEY=/etc/ssh/ssh_host_dsa_key
|
|
PID_FILE=/var/run/sshd.pid
|
|
do_rsa1_keygen() {
|
|
if ! test -f $RSA1_KEY ; then
|
|
echo -n "Generating SSH1 RSA host key: "
|
|
if $KEYGEN -q -t rsa1 -f $RSA1_KEY -C '' -N '' >&/dev/null; then
|
|
success "RSA1 key generation"
|
|
echo
|
|
else
|
|
failure "RSA1 key generation"
|
|
echo
|
|
exit 1
|
|
fi
|
|
fi
|
|
}
|
|
do_rsa_keygen() {
|
|
if ! test -f $RSA_KEY ; then
|
|
echo -n "Generating SSH2 RSA host key: "
|
|
if $KEYGEN -q -t rsa -f $RSA_KEY -C '' -N '' >&/dev/null; then
|
|
success "RSA key generation"
|
|
echo
|
|
else
|
|
failure "RSA key generation"
|
|
echo
|
|
exit 1
|
|
fi
|
|
fi
|
|
}
|
|
do_dsa_keygen() {
|
|
if ! test -f $DSA_KEY ; then
|
|
echo -n "Generating SSH2 DSA host key: "
|
|
if $KEYGEN -q -t dsa -f $DSA_KEY -C '' -N '' >&/dev/null; then
|
|
success "DSA key generation"
|
|
echo
|
|
else
|
|
failure "DSA key generation"
|
|
echo
|
|
exit 1
|
|
fi
|
|
fi
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
# Create keys if necessary
|
|
do_rsa1_keygen;
|
|
do_rsa_keygen;
|
|
do_dsa_keygen;
|
|
|
|
echo -n "Starting sshd: "
|
|
if [ ! -f $PID_FILE ] ; then
|
|
sshd
|
|
RETVAL=$?
|
|
if [ "$RETVAL" = "0" ] ; then
|
|
success "sshd startup"
|
|
touch /var/lock/subsys/sshd
|
|
else
|
|
failure "sshd startup"
|
|
fi
|
|
fi
|
|
echo
|
|
;;
|
|
stop)
|
|
echo -n "Shutting down sshd: "
|
|
if [ -f $PID_FILE ] ; then
|
|
killproc sshd
|
|
RETVAL=$?
|
|
[ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/sshd
|
|
fi
|
|
echo
|
|
;;
|
|
restart)
|
|
$0 stop
|
|
$0 start
|
|
RETVAL=$?
|
|
;;
|
|
condrestart)
|
|
if [ -f /var/lock/subsys/sshd ] ; then
|
|
$0 stop
|
|
$0 start
|
|
RETVAL=$?
|
|
fi
|
|
;;
|
|
status)
|
|
status sshd
|
|
RETVAL=$?
|
|
;;
|
|
*)
|
|
echo "Usage: sshd {start|stop|restart|status|condrestart}"
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
exit $RETVAL
|