OpenSSL Vulnerability for Debian

Debian has a wiki page on the OpenSSL key generation vulnerability. To fix your SSH keys:

aptitude update
aptitude dist-upgrade # regular upgrade is not sufficient
rm /etc/ssh/ssh_host_*
dpkg-reconfigure openssh-server

If you have any public-key-based authorizations setup, delete the keys and start over.

Leave a Reply

You must be logged in to post a comment.