diff mbox series

[2/2] core190: Load SSH RSA key on legacy systems

Message ID 20241209113711.2684032-2-michael.tremer@ipfire.org
State Accepted
Commit 804ac341a18718e5593ef8d77670d28018515aa7
Headers
Series [1/2] OpenSSH: No longer try to load the RSA key |

Commit Message

Michael Tremer Dec. 9, 2024, 11:37 a.m. UTC 
  Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 config/rootfiles/core/190/update.sh | 8 ++++++++
 1 file changed, 8 insertions(+)
diff mbox series

Patch

diff --git a/config/rootfiles/core/190/update.sh b/config/rootfiles/core/190/update.sh
index 16ef608e2..3950ba903 100644
--- a/config/rootfiles/core/190/update.sh
+++ b/config/rootfiles/core/190/update.sh
@@ -104,6 +104,14 @@  ldconfig
 # Filesytem cleanup
 /usr/local/bin/filesystem-cleanup
 
+# Load the RSA key on systems that still have one
+if [ -e "/etc/ssh/ssh_host_rsa_key" ]; then
+	(
+		echo "# Load the legacy RSA key - Deprecated in Core Update 190"
+		echo "HostKey /etc/ssh/ssh_host_rsa_key"
+	) > /etc/ssh/sshd_config.d/rsa.conf
+fi
+
 # Apply local configuration to sshd_config
 /usr/local/bin/sshctrl