[ubuntu-uk] OpenSSL vulnerability

[Matthew Wild]

On Tue, May 13, 2008 at 7:45 PM, Jai Harrison <jai at jaiharrison.com> wrote:
> Mmm,
>
>  I use SSH to administrate a machine locally. I figure I should spare
>  no steps for the machine's security.
>
>  However I haven't the faintest how I'm meant to generate a new key now
>  once the update has been applied. Anyone able to help?
>

Run "ssh-vulnkey" in the terminal to check your keys. Just run
"ssh-keygen" if your keys are compromised (I think it will overwrite
your existing ones).

As I said in the other thread, if you log in with a password and don't
use keys, it doesn't affect you. (unless you also run openssh-server
on your PC).