Recreate SSH host keys?

[lumbric]

I set up two nearly identical FreeNAS machines. Therefore I used the configuration of the first one and imported it in a fresh image for the second one. Of course some things have to be changed. The harddisk configuration, the hostname, the admin password (did I forget to change something important?).

Well and then I should recreate the SSH host keys... How can this be done in FreeNAS?
As far as I know I cannot recrate them simply in /etc/ssh as I would do when cloning a *NIX server. The FAQ tells me why this can't be done:
http://forums.freenas.org/faq.php?faq=general_freenas#faq_filesystem_changes
http://forums.freenas.org/showthrea...-files-disappearing-on-reboot&p=5817#post5817

Is there a way to simply delete the keys and reenable the service or so?

 

[lumbric]

I've found this similar question, but unfortunately there is no answer either:

http://forums.freenas.org/showthread.php?623-Cloning-FreeNAS-How-do-I-generate-a-new-SSL-Certificate

 

[tingo]

I'm guessing that doing

Code:

service sshd keygen

as root only tells you that you already have keys?

 

[tingo]

A bit more digging has revealed that the kerys are stored in the database:

Code:

[root@kg-f5] ~# sqlite3 /data/freenas-v1.db "PRAGMA table_info([services_ssh])"
0|ssh_host_dsa_key|text|0||0
1|ssh_host_rsa_key_pub|text|0||0
2|ssh_host_ecdsa_key_pub|text|0||0
3|ssh_host_key|text|0||0
4|ssh_passwordauth|bool|1|0|0
5|ssh_options|text|1||0
6|ssh_tcpport|integer unsigned|1||0
7|ssh_privatekey|text|1||0
8|ssh_compression|bool|1|0|0
9|ssh_host_key_pub|text|0||0
10|ssh_rootlogin|bool|1|0|0
11|ssh_tcpfwd|bool|1|0|0
12|ssh_host_rsa_key|text|0||0
13|ssh_host_ecdsa_key|text|0||0
14|id|integer|0||1
15|ssh_host_dsa_key_pub|text|0||0

But I do not know about an easy way to force FreeNAS to generate new keys.

 

[lumbric]

Thanks for your hints! In the end, I set up a fresh and new second FreeNAS install, because I made also some other mistakes. Anyway I tried your first suggestion which gives me the following error message:

Code:

# service sshd keygen
Will not 'keygen' sshd because sshd_enable is NO.

Your idea to edit the database is interesting, but I don't know how to.

 

[wizmin]

Thanks for your hints! In the end, I set up a fresh and new second FreeNAS install, because I made also some other mistakes. Anyway I tried your first suggestion which gives me the following error message:

Code:

# service sshd keygen
Will not 'keygen' sshd because sshd_enable is NO.

Your idea to edit the database is interesting, but I don't know how to.

Are you trying to Create New SSH Keys if so
You can try this

Code:

freenas# ssh-keygen -t rsa 

The reason you get 'sshd_enable is NO.' its beause you dont have SSH Enable in the '/etc/rc.conf' or its not enable in the Services

Hope this helps..