Saturday, December 19, 2015

 

Where you noted your ssh key needs renew

After updating to fedora23 I noted I cant use ssh from my laptop to servers I use to connect it. I have got the weird message ssh -vvv:  
debug1: Roaming not allowed by server

Obviously it isn't a server problem, while try to understand I have found:
 https://www.gentoo.org/support/news-items/2015-08-13-openssh-weak-keys.html

Of course adding
PubkeyAcceptedKeyTypes=+ssh-dss
in .ssh/config helps
Checking the key shows that I need new key pairs soon:
-rw-------. 1 jfclere jfclere   736 Nov 22  2006 id_dsa
-rw-r--r--. 1 jfclere jfclere   619 Nov 22  2006 id_dsa.pub

I have being using the same keys for ~10 years in fact!!!
Well mostly only inside Red Hat vpn, time to change keys and spot the server I am using only from time to time...

This page is powered by Blogger. Isn't yours?