Post by getmythe on Jun 3, 2007 16:46:29 GMT 7
Important read for every user of the SSH module!
Recently I noticed that every single N2100 has the exact same ssh host keys. This is a major security issue since it leaves every single one of them wide open to man-in-the-middle attacks if they have ssh enabled. Please update to SSH module version 3.2.01 and perform an ssh (host) key flush from the options page. Afterwards reboot your N2100 and delete the known_hosts file on your clients (otherwise ssh will refuse to connect to your thecus as the host keys have changed).
In case you do have ssh keys stored in directory /raid/module/SSH/sshkeys, copy them somewhere safe before flushing. Only the host keys located at /etc/ssh/ need to be deleted. The SSH module will generate new host keys on the next startup.
getmythe
dbridges, please upload mirror for SSH module, the link on the Thecus Wiki has already been updated.
Recently I noticed that every single N2100 has the exact same ssh host keys. This is a major security issue since it leaves every single one of them wide open to man-in-the-middle attacks if they have ssh enabled. Please update to SSH module version 3.2.01 and perform an ssh (host) key flush from the options page. Afterwards reboot your N2100 and delete the known_hosts file on your clients (otherwise ssh will refuse to connect to your thecus as the host keys have changed).
In case you do have ssh keys stored in directory /raid/module/SSH/sshkeys, copy them somewhere safe before flushing. Only the host keys located at /etc/ssh/ need to be deleted. The SSH module will generate new host keys on the next startup.
getmythe
dbridges, please upload mirror for SSH module, the link on the Thecus Wiki has already been updated.