Re: openssh keypair creation by postinstall.sh

Am Montag 05 September 2005 12:18 schrieb Benjamin Schieder:
> > Open Patch: 2005090512151527367 [by blindcoder]              + blindcoder
> >
> > Benjamin Schieder:
> >         move openssh key generation to postinstall.sh
>
> Hi list.
>
> above patch moves the key generation from stone to postinstall script.
> I'm not sure about deleting the keys at deinstallation, so I blocked it
> by an 'exit 0' befor the any_removed call.
>
> What are your feelings here? Should the ssh keys be removed upon
> deinstallation?

Those keys are used to authenticate the host they are installed onto, right? I 
think it's better to not remove them so they can be reused. Otherwise the 
host and it's keys would have to be made known across the network every time 
openssh is installed.

Hope that helps,
	Stefan Fiedler

>
> Greetings,
> 	Benjamin