Re: [cobalt-security] quick opensshd question

["Timothy Reiner" <timothy@xxxxxxxxxxxxxxxxxxxx>]

Hello Eddy,

Thanks for the suggestions.

>  Ask him what PuTTY shows as the public key.  See if it matches
>  ones that you've used, or if it's something totally different.

In process of doing this, I noticed one major difference:  he tried logging
in using SSH 1 instead of SSH 2 (apparently was logging in from a different
machine than normal and didn't set the preferences like he had before).
When he switched back to SSH2 protocol, the key fingerprint was the same as
before.

So, it seems like the server is using different keys for each protocol
implementation!  I haven't finished digging through the documentation yet to
confirm, but I'm beginning to think I can rest a bit easier.

Now all I need to do is go in and change the config so sshd no longer
accepts SSH 1 connections . . .

Thanks again,

Tim Reiner
Comnet Co,. Ltd.