Package: openssh-server
Version: 1:5.5p1-6+squeeze
Serverity: wishlist
We install our machines with a predefined clone. We get rid of the host-keys to
have them uniq before cloning.
Right now, we issue dpkg-reconfigure openssh-server after first boot to
generate the keys again.
Please extend /etc/init.d/ssh to check keys and if not generate them.
Here is our stanza solution:
check_keys_avail() {
if [ ! -e /etc/ssh/ssh_host_key_dsa ]; then
dpkg-reconfigure openssh-server
fi
}
case "$1" in
start)
check_privsep_dir
check_keys_avail
Regards
Stefan