Re: Openssh
Darren Tucker <[email protected]>
| Newsgroups | gmane.os.openbsd.www |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Oct 06, 2006 at 01:59:39PM -0400, Pan, Kui wrote: > Hello, > > Not quite sure this is the right email address for openssh questions. If > it's not, please kindly forward this email to the right people. Thanks. The correct place is [email protected] (reply-to set). > I'm compiling the Openssh4.4p1 and I'm getting the warning messages > below. I'm using openssl 0.9.8c and zlib 1.2.3 > > configure: error: *** zlib too old - check config.log *** There's a good chance that you have an older zlib on your system that is being found first. config.log will tell you what it found (look for "found zlib version"). > One more question. Since Opnessh 4.3, I cannot generate 2048 bit RSA > key, why's that? > > # ./ssh-keygen -b 2048 -t dsa -N "" > DSA keys must be 1024 bits That's a DSA key not an RSA key, and ssh-keygen won't let you generate them because the spec (FIPS 186-2) doesn't allow them. If you want keys larger than 1024 bits then use RSA. -- Darren Tucker (dtucker at zip.com.au) GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement.