1. Forum
  2. USENET
  3. alt.bbs.synchronet

  • SSH key keeps rotating?

    From Crashj@crashj@bbs.jensencloud.net.remove-9x9-this to All on Sat Jul 24 16:39:02 2021
    From Newsgroup: alt.bbs.synchronet

    Hi all,

    I have an SBBS 3.18 release installation on Windows 10, starting as a Windows service.

    Each time I attempt to SSH in to my BBS, I will receive a notification to accept a new key, and on subsequent connections, they will fail because the
    key has changed. This happens on any permutation of attempting IP or hostname as it saves it by IP in the keystore.

    I also see periodic error messages referring to keyset in my logs, across multiple SBBS services. Not sure if it is related.

    TIA for any ideas.

    Jensencloud BBS | Fresno, CA | ssh://jensencloud.net
    --- Synchronet 3.18b-Win32 NewsLink 1.113
    * Jensencloud - Fresno, CA - telnet://bbs.jensencloud.net
    --- Synchronet 3.19c-Linux NewsLink 1.113
  • From Digital Man@digital.man@vert.synchro.net.remove-4xq-this to Crashj on Sat Jul 24 20:11:05 2021
    From Newsgroup: alt.bbs.synchronet

    To: Crashj
    Re: SSH key keeps rotating?
    By: Crashj to All on Sat Jul 24 2021 04:39 pm

    From Newsgroup: alt.bbs.synchronet

    Hi all,

    I have an SBBS 3.18 release installation on Windows 10, starting as a Windows service.

    Each time I attempt to SSH in to my BBS, I will receive a notification to accept a new key, and on subsequent connections, they will fail because the key has changed. This happens on any permutation of attempting IP or hostname as it saves it by IP in the keystore.

    I also see periodic error messages referring to keyset in my logs, across multiple SBBS services. Not sure if it is related.

    Sound related. What are the error messages?

    Maybe this FAQ will help:
    http://wiki.synchro.net/faq:tcpip#ssh_session_key
    --
    digital man

    Sling Blade quote #6:
    Karl: he should've had a chance to grow up. He would had fun some time.
    Norco, CA WX: 69.9øF, 77.0% humidity, 5 mph E wind, 0.00 inches rain/24hrs
    --- Synchronet 3.19a-Win32 NewsLink 1.113
    * Vertrauen - Riverside County, California - telnet://vert.synchro.net
    --- Synchronet 3.19c-Linux NewsLink 1.113
  • From Crashj@crashj@bbs.jensencloud.net.remove-s2w-this to Digital Man on Sun Jul 25 12:58:48 2021
    From Newsgroup: alt.bbs.synchronet

    To: Digital Man
    Re: SSH key keeps rotating?
    By: Digital Man to Crashj on Sat Jul 24 2021 08:11 pm

    I also see periodic error messages referring to keyset in my logs, across multiple SBBS services. Not sure if it is related.

    Sound related. What are the error messages?

    Maybe this FAQ will help:
    http://wiki.synchro.net/faq:tcpip#ssh_session_key

    The message seen repeatedly in error.log:

    No TLS certificate ERROR 'No permiss.to perform this operation' (-21) opening keyset

    This seems to be added for each service that starts. I did follow the FAQ
    and remove the cryptlib.key and ssl.cert files and restart all services.

    I no longer see any errors in my log files, and the key looks to be stable.
    I suspect it was due to changing my sysop password after installation.

    Thanks for the guidance.
    --- Synchronet 3.18b-Win32 NewsLink 1.113
    * Jensencloud - Fresno, CA - telnet://bbs.jensencloud.net
    --- Synchronet 3.19c-Linux NewsLink 1.113
  • From Digital Man@digital.man@vert.synchro.net.remove-s59-this to Crashj on Sun Jul 25 17:43:48 2021
    From Newsgroup: alt.bbs.synchronet

    To: Crashj
    Re: SSH key keeps rotating?
    By: Crashj to Digital Man on Sun Jul 25 2021 12:58 pm

    The message seen repeatedly in error.log:

    No TLS certificate ERROR 'No permiss.to perform this operation' (-21) opening keyset

    This seems to be added for each service that starts. I did follow the FAQ and remove the cryptlib.key and ssl.cert files and restart all services.

    I no longer see any errors in my log files, and the key looks to be stable.

    Cool.

    I suspect it was due to changing my sysop password after installation.

    That error is more likely a file permissions issue. Glad you resolved it.
    --
    digital man

    This Is Spinal Tap quote #46:
    "Not an Exit" - we don't want an exit. Well that's true.
    Norco, CA WX: 77.8øF, 64.0% humidity, 9 mph E wind, 0.00 inches rain/24hrs
    --- Synchronet 3.19a-Win32 NewsLink 1.113
    * Vertrauen - Riverside County, California - telnet://vert.synchro.net
    --- Synchronet 3.19c-Linux NewsLink 1.113