linux ssh 失效时间,Linux ssh key 失效

处理/etc/ssh/ssh_host_rsa_key 失效问题

处理/etc/ssh/ssh_host_rsa_key 失效问题

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@        WARNING: UNPROTECTED PRIVATE KEY FILE!          @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Permissions 0777 for '/etc/ssh/ssh_host_rsa_key' are too open.

It is recommended that your private key files are NOT accessible by others.

This private key will be ignored.

bad permissions: ignore key: /etc/ssh/ssh_host_rsa_key

Could not load host key: /etc/ssh/ssh_host_rsa_key

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@        WARNING: UNPROTECTED PRIVATE KEY FILE!          @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Permissions 0777 for '/etc/ssh/ssh_host_dsa_key' are too open.

It is recommended that your private key files are NOT accessible by others.

This private key will be ignored.

bad permissions: ignore key: /etc/ssh/ssh_host_dsa_key

Could not load host key: /etc/ssh/ssh_host_dsa_key

Disabling protocol version 2. Could not load host key

sshd: no hostkeys available -- exiting.

[FAILED]

如果出现已上bug

1. 备份/etc/ssh/ssh_host_rsa_key

sudo cp /etc/ssh/ssh_host_rsa_key ~/etc/ssh/ssh_host_rsa_key

2. 备份/etc/ssh/ssh_host_dsa_key

sudo cp /etc/ssh/ssh_host_dsa_key ~/etc/ssh/ssh_host_dsa_key

3. 删除原有的这两个配置文件

sudo rm -rf /etc/ssh/ssh_host_rsa_key ; sudo rm -rf /etc/ssh/ssh_host_dsa_key

4. 进行重启sshd服务

sudo /etc/init.d/sshd restart

5. 如果出现以下的错误，再进行配置

Stopping sshd:                                              [FAILED]

Starting sshd: /var/empty/sshd must be owned by root and not group or world-writable.

[FAILED]

6. 给配置文件授权

chmod 744 /var/empty/sshd

chmod u+rwx /var/empty/ssh/etc/local~

注：如果/var/empty/ssh/etc的属主有执行的权限sshd也是不能成功启动的，需要去掉权限

7. 再次启动sshd服务如果是这样的情况

正确是这样

Stopping sshd:                                             [  OK  ]

Starting sshd:                                             [  OK  ]

如果是这样

Stopping sshd:                                             [FAILED]

Starting sshd:                                             [  OK  ]

再次启动还是这样，则会有问题的，需要再次进行配置

8. 查看sshd进程的侦听状态

比如：

[root@localhost ~]# netstat -natpl | grep sshd

tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      27641/sshd          ##正确的显示方式

tcp        0      0 172.28.88.67:22           172.28.88.68:50692        ESTABLISHED 19493/sshd          ##需要kill

tcp        0      0 172.28.88.67:22           172.28.88.78:56349        ESTABLISHED 25221/sshd          ##需要kill

tcp        0      0 172.28.88.67:22           172.28.88.208:50812        ESTABLISHED 20536/sshd          ##需要kill

tcp        0     52 172.28.88.67:22           172.28.88.18:52873        ESTABLISHED 27550/sshd          ##需要kill

tcp        0      0 :::22                       :::*                        LISTEN      27641/sshd    ##正确的显示方式

9. 再次启动就真没有什么问题

Stopping sshd:                                             [  OK  ]Starting sshd:                                             [  OK  ]