1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
#!/bin/sh -e
action=$1
version=$2
if [ -d /etc/ssh-nonfree -a ! -d /etc/ssh ]; then
version=1.2.27
fi
if [ "$action" = upgrade -o "$action" = install ]
then
# check if debconf is missing
if ! test -f /usr/share/debconf/confmodule
then
cat <<EOF
WARNING: ssh's pre-configuration script relies on debconf to tell you
about some problems that might prevent you from logging in if you are
upgrading from the old, Non-free version of ssh.
If this is a new installation, you don't need to worry about this.
Just go ahead and install ssh (make sure to read .../ssh/README.Debian).
If you are upgrading, but you have alternative ways of logging into
the machine (i.e. you're sitting in front of it, or you have telnetd
running), then you also don't need to worry too much, because you can
fix it up afterwards if there's a problem.
If you're upgrading from an older (non-free) version of ssh, and ssh
is the only way you have to access this machine, then you should
probably abort the installation of ssh, install debconf, and then
retry the installation of ssh.
EOF
echo -n "Do you want to install SSH anyway [yN]: "
read input
expr "$input" : '[Yy]' >/dev/null || exit 1
# work around for missing debconf
db_get() { : ; }
RET=true
if [ -d /etc/ssh-nonfree -a ! -d /etc/ssh ]; then
cp -a /etc/ssh-nonfree /etc/ssh
fi
else
# Source debconf library.
. /usr/share/debconf/confmodule
db_version 2.0
fi
db_get ssh/use_old_init_script
if [ "$RET" = "false" ]; then
echo "ssh config: Aborting because ssh/use_old_init_script = false" >&2
exit 1
fi
# deal with upgrading from pre-OpenSSH versions
key=/etc/ssh/ssh_host_key
export key
if [ -n "$version" ] && [ -x /usr/bin/ssh-keygen ] && [ -f $key ] &&
dpkg --compare-versions "$version" lt 1.2.28
then
# make sure that keys get updated to get rid of IDEA
#
# N.B. this only works because we've still got the old
# nonfree ssh-keygen at this point
#
# First, check if we need to bother
echo -en '\0\0' | 3<&0 sh -c \
'dd if=$key bs=1 skip=32 count=2 2>/dev/null | cmp -s - /dev/fd/3' || {
# this means that bytes 32&33 of the key were not both zero, in which
# case the key is encrypted, which we need to fix
chmod 600 $key
ssh-keygen -u -f $key >/dev/null
if type restorecon >/dev/null 2>&1; then
restorecon "$key.pub"
fi
}
fi
fi
#DEBHELPER#
|
