OPNsense Forum

Archive => 21.1 Legacy Series => Topic started by: fl1ger on July 05, 2021, 06:59:11 PM

Title: Do ssh keys get changed by upgrades
Post by: fl1ger on July 05, 2021, 06:59:11 PM
Moin!

Subject says it all. I rarely (aka never after my first installation which was at the start of the pandemic) use ssh to log in to OPNSense, however I currently have a bit of a flaky pppoe connection so thought it would be a good idea to debug some more on the shell prompt. However when trying to log in ssh warns me that the ssh key has changed and I am very sure that I didn't change anything there. So is the SSH key changed between minor/major OPNSense versions or is there something bad going on?

So long
-Ralf
Title: Re: Do ssh keys get changed by upgrades
Post by: fabian on July 05, 2021, 08:16:34 PM
It will be regenerated in a reinstall.
Title: Re: Do ssh keys get changed by upgrades
Post by: franco on July 06, 2021, 07:27:53 AM
Hi Ralf,

Only factory resets and clean installs will do this. Even the config import from the installer will retain the old keys.

However, OpenSSH has been deprecating old key formats a number of times now and maybe what you are seeing is a switch to a higher encryption key that was already there.


Cheers,
Franco