diff --git a/Linux/SSH/README.md b/Linux/SSH/README.md index 16dc5d5..1582a07 100644 --- a/Linux/SSH/README.md +++ b/Linux/SSH/README.md @@ -23,6 +23,8 @@ SSH_CONFIG_DIR="/etc/ssh/sshd_config.d" SSH_MAIN_CONFIG="/etc/ssh/sshd_config" SSH_CONFIG_FILE="$SSH_CONFIG_DIR/secure.conf" ED25519_KEY="/etc/ssh/ssh_host_ed25519_key" +ECDSA_KEY="/etc/ssh/ssh_host_ecdsa_key" + RED='\033[1;31m' GREEN='\033[1;32m' @@ -103,6 +105,22 @@ else log "Host-Schlüssel ssh_host_ed25519_key ist bereits vorhanden." fi +if [ ! -f "$ECDSA_KEY" ]; then + warn "Host-Schlüssel fehlt. Generiere ssh_host_ecdsa_key..." + if sudo ssh-keygen -t ecdsa -b 384 -f "$ECDSA_KEY" -N "" &> /dev/null; then + sudo chown root:root "$ECDSA_KEY" + sudo chmod 600 "$ECDSA_KEY" + log "Host-Schlüssel ssh_host_ecdsa_key wurde erstellt." + else + error "Fehler beim Erstellen des Host-Schlüssels." + exit 1 + fi +else + log "Host-Schlüssel ssh_host_ecdsa_key ist bereits vorhanden." +fi + + + sudo rm -f $SSH_CONFIG_DIR/* echo "Include $SSH_CONFIG_DIR/*" | sudo tee $SSH_MAIN_CONFIG > /dev/null