Re: OT?: Apache

[George Nelson <ghnelson@ux1.cso.uiuc.edu>]

Thanks a lot!

Changing the permissions on /dev/arandom fixed everything.

George

On Sat, 4 Nov
2000, Rickie Kerndt wrote:

> >This is what I get with ssh -v when connection from where I work:
> >
> >SSH Version 1.2.26 [sparc-sun-solaris2.6], protocol version 1.5.
> >Standard version.  Does not use RSAREF.
> >some host: Reading configuration data /etc/ssh_config
> >some host: ssh_connect: getuid 1008 geteuid 0 anon 0
> >some host: Connecting to mydomain.com [some ip] port 22.
> >some host: Allocated local port 1022.
> >some host: connect: Connection refused
> >some host: Trying again...
> >
> 
> This smells like what happened to me last week when my ssh broke. 
> Take a look at the permissions for /dev/arandom. They should be set 
> to 644.
> 
> I just confirmed that openssl changes the permissions of /dev/arandom 
> when creating the cert and keys for apache.
> 
> The command that did it is:
> openssl req -x509 -nodes -newkey dsa:dsa1024.pem \
> -out /etc/ssl/dsacert.pem -keyout /etc/ssl/private/dsakey.pem
> 
> If you had just recently configured ssl, then is may be why ssh is not working.
> 
> Theo had responded to a recent post of mine that something to this 
> effect had been fixed in the source some time ago. I'm running 
> OpenBSD2.7-released with manually applied patches.
> 
> 
>