Home / user-108814

Wojtek B.'s questions

Martin Hope
Wojtek B.
Asked: 2013-07-22 12:56:29 +0800 CST
  • 1

I have problem installing paperclip gem in Ubuntu 12.04.2 LTS.

Activesupport complains that it needs ruby 1.9.3 but I have it already installed. 

root@Ubuntu-1204-precise-32-minimal /home/.../releases/current # gem install paperclip -v '3.3.1'
ERROR:  Error installing paperclip:
activesupport requires Ruby version >= 1.9.3.

root@Ubuntu-1204-precise-32-minimal /home/.../releases/current # ruby -v
ruby 1.9.3p0 (2011-10-30 revision 33570) [i686-linux]
ruby-on-rails
Martin Hope
Wojtek B.
Asked: 2012-02-03 09:34:55 +0800 CST
  • 1

I want to build a deb package with the latest version of openssh from source. Then I want to install it on my machine. I am running:

Linux Ubuntu-1110-oneiric-64-minimal 3.0.0-12-server #20-Ubuntu SMP Fri Oct 7 16:36:30 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux

To achieve my goal I do:

wget ftp://ftp.openbsd.com/pub/OpenBSD/OpenSSH/portable/openssh-5.9p1.tar.gz
wget ftp://ftp.openbsd.com/pub/OpenBSD/OpenSSH/portable/openssh-5.9p1.tar.gz.asc
gpg openssh-5.9p1.tar.gz.asc 
apt-get build-dep openssh-server openssh-client
apt-get source openssh-server
cd openssh-5.8p1/
uupdate -v 5.9p1 /root/packages/openssh/openssh-5.9p1.tar.gz
cd ../openssh-5.9p1
dpkg-buildpackage -us -uc -nc

But I get an error:

make[1]: Entering directory `/root/packages/openssh/openssh-5.9p1'
rm -f debian/tmp/etc/ssh/sshd_config
dh_install -Nopenssh-client-udeb -Nopenssh-server-udeb --fail-missing
cp: cannot stat `debian/tmp/usr/bin/ssh-vulnkey': No such file or directory
dh_install: cp -a debian/tmp/usr/bin/ssh-vulnkey debian/openssh-client//usr/bin/     returned exit code 1
make[1]: *** [override_dh_install] Error 2
make[1]: Leaving directory `/root/packages/openssh/openssh-5.9p1'
make: *** [binary] Error 2
dpkg-buildpackage: error: debian/rules binary gave error exit status 2

Any ideas what do I do to make this work?

ubuntu security ssh package-management deb
Martin Hope
Wojtek B.
Asked: 2012-01-31 05:02:40 +0800 CST
  • 2

When I try to ssh to my server in Germany from my UK laptop I get:

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
.....

I removed the appropriate line from my ~/.ssh/known_hosts and then ssh'ed once again. On the server (via ssh terminal) I execute:

ssh-keygen -lf /etc/ssh/ssh_host_rsa_key.pub

then from my laptop I do:

ssh-keyscan -p 22 -t rsa my_domain_or_ip.com > /tmp/ssh_host_rsa_key.pub
ssh-keygen -l -f /tmp/ssh_host_rsa_key.pub

When I copare the results i see that the fingerprints are different! The length of the certificate is also different (on the server it is 2048 but remote scan shows 1024). The DSA fingerprints are also different.

The problem lies probably not in my local network, since arping for the server ip returns 0 results. I asked a friend in Poland to execute the same commands for me and he got the same results.

Any ideas on what is happening?

EDIT: When I ssh to the server and do:

ssh-keyscan -p 22 -t rsa 127.0.0.1 > /tmp/ssh_localhost_rsa_key.pub
ssh-keygen -l -f /tmp/ssh_localhost_rsa_key.pub

then I see that the fingerprint is still different! Then when I do on the server:

argping -c 5 server_ip

I get 0 responses.

This is very weird!

EDIT 2 (SUMMARY):

username@server:~$ ssh-keyscan -p 22 127.0.0.1 > /tmp/rsa.tmp
# 127.0.0.1 SSH-1.99-OpenSSH_33.33
username@server:~$ ssh-keygen -lf /tmp/rsa.tmp 
1024 12:.................................    127.0.0.1 (RSA)
username@server:~$ ssh-keygen -lf /etc/ssh/ssh_host_rsa_key.pub 
2048 32:................................. /etc/ssh/ssh_host_rsa_key.pub (RSA)
ssh ssh-keys fingerprint