Stop Karaf from generating new SSH keys on startup -


i've noticed karaf keeps generating new ssh keys on each startup. makes automatic scripts connecting via ssh useless, because new key must manually accepted each time.

is possible stop behaviour , generate new keys once per new installation?

more debug info: i've noticed, 'etc/host.key' has not changed. however, after stopping , starting karaf message:

ssh -p 8101 localhost -ohostkeyalgorithms=+ssh-dss

offending dsa key in ~/.ssh/known_hosts:5   remove with:   ssh-keygen -f "~/.ssh/known_hosts" -r [localhost]:8101 dsa host key [localhost]:8101 has changed , have requested strict checking. host key verification failed.

the fact dsa keys generated doesn't match log message karaf.log well:

info | sshd-sshserver[20056f77]-nio2-thread-2 | simplegeneratorhostkeyprovider | 48 - org.apache.sshd.core - 1.2.0 | generatekeypair(rsa) generating host key - size=4096

my etc/org.apache.karaf.shell.cfg:

sshport=8101 sshhost=0.0.0.0 sshrealm=karaf hostkey=${karaf.etc}/host.key algorithm=rsa keysize=4096

after digging in logs i've found out, host.key file not loaded properly:

2017-03-29t13:44:58,977 | warn | sshd-sshserver[18c17f90]-nio2-thread-1 | simplegeneratorhostkeyprovider | 48 - org.apache.sshd.core - 1.2.0 | resolvekeypair(~/karaf-docker/apache-karaf-4.1.0/etc/host.key) failed (invalidkeyspecexception) load: missing classes: org.bouncycastle.jcajce.provider.asymmetric.rsa.bcrsaprivatecrtkey 2017-03-29t13:45:00,340 | error | sshd-sshserver[18c17f90]-nio2-thread-1 | simplegeneratorhostkeyprovider | 48 - org.apache.sshd.core - 1.2.0 | overwriting key (~/karaf-docker/apache-karaf-4.1.0/etc/host.key) disabled: using throwaway ssh-dss: sha256:3ywwxdzoymmvebyiwmiguq8g3j7kfapd+avcmoue2r4 2017-03-29t13:45:00,342 | warn | sshd-sshserver[18c17f90]-nio2-thread-1 | serversessionimpl

the apache sshd reads/writes host.key using java serialization might cause issues in osgi (and, maybe worse, redeploy of feature might turn file useless).

karaf creates server key when first connect using ssh. place key in karaf home etc/host.key. key should created once each karaf server.

you can provide own key there avoid overhead of creation.

the key generated org.apache.sshd.server.keyprovider.simplegeneratorhostkeyprovider. when creates key should see message in log:

generatekeypair(rsa) generating host key - size=4096

Comments

Post a Comment

Popular posts from this blog

javascript - Clear button on addentry page doesn't work -

this addentry blog page have made scratch , there underlying problems code particularly clear button supposed clear text entered when button clicked on doesn't work have saved html file problem. also 1 other problem submit button works doesn't pass of text index file have written php , reason whenever click on submit button redirects me index page without posting entry have made. <!doctype html> <html> <head> <script> function message() { alert("clear form?"); } </script> <style> body {background-color: beige;} h1 {color: black;} p {color: black;} textarea { width: 50%; height: 150px; padding: 12px 20px; box-sizing: border-box; border: 2px solid #ccc; border-radius: 4px; background-color: white; font-size: 16px; resize: none; } div { padding-left: 20px; } </style> </head> <meta charset="utf-8"> <link rel="stylesheet" href=".
Read more

c# - Selenium Authentication Popup preventing driver close or quit -

i have selenium automated task setup login website retrieve information. it's basic in automation. logging in , clicking 2 links. running issue proving problem. the site in question uses authentication required popup not javascript popup rather regular windows auth popup. have read isn't handled out of box selenium. i using " http://username:password@url.com " site every , site has issues on end prompt me again username/password randomly. have enter username/password twice in row when navigating there hand. since task loops continuously few hours picking needed info figured use webdriverwait verify element present on page. if authentication popup appears, element isn't present. no need care run, start over. the problem having when authentication popup displayed , hit timeout limit want close driver/browser window can start task on again. however, driver.close() , driver.quit() not doing anything. browser remains open , unloaded page still there login p
Read more

tensorflow when input_data MNIST_data , zlib.error: Error -3 while decompressing: invalid block type -

i'm geting started tensorflow,followed tutorials,but cannot download mnist data. import tensorflow tf tensorflow.examples.tutorials.mnist import input_data mnist=input_data.read_data_sets("mnist_data/",one_hot=true) print("download done!") error information: extracting mnist_data/train-images-idx3-ubyte.gz traceback (most recent call last): file "/home/sj/program/tesorflow_try.py", line 6, in <module> mnist=input_data.read_data_sets("mnist_data/",one_hot=true) file "/usr/local/lib/python2.7/dist-packages/tensorflow/contrib/learn/python/learn/datasets/mnist.py", line 213, in read_data_sets train_images = extract_images(f) file "/usr/local/lib/python2.7/dist-packages/tensorflow/contrib/learn/python/learn/datasets/mnist.py", line 60, in extract_images buf = bytestream.read(rows * cols * num_images) file "/usr/lib/python2.7/gzip.py", line 268, in read self._read(readsize) file
Read more