Mailing List Archive

minor prob with spec file
The openssl rpm needs to be installed on the system *before* the
openssh-server rpm is installed. This is because the openssh-server's
post script does the host key generation.

As it is now, the command

rpm -U openss*

intended to install openssh* and openssl* will report that the host
key generation failed. Fix: change

PreReq: openssh chkconfig >= 0.9

to

PreReq: openssh chkconfig >= 0.9 openssl

in %package server.

Best

Mate
---
Mate Wierdl | Dept. of Math. Sciences | University of Memphis
Re: minor prob with spec file [ In reply to ]
mw@wierdlmpc.msci.memphis.edu said:
> The openssl rpm needs to be installed on the system *before* the
> openssh-server rpm is installed. This is because the openssh-server's
> post script does the host key generation.

although I agree with your diagnosis that that is *one* way to fix the
problem, I actually think it is the wrong solution...

generating keys on the fly at install I think is incorrect - it can
cause problems with install sets run at initial install (ie for systems
which install ssh when they first install rather than as an add on
package). For this reason I always take the key generation script out
of the rpm scripts set and put it into the start of the
/etc/rc.d/init.d/sshd script start section - hence on first installed
boot the key is generated.

Nigel.
--
[. - Opinions expressed are personal and may not be shared by VData - ]
[ Nigel Metheringham Nigel.Metheringham@VData.co.uk ]
[ Phone: +44 1423 850000 Fax +44 1423 858866 ]