* Tue Aug 13 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-8.sme

- fix new log does not fill after log rotate [SME: 12690]

root/etc/e-smith/events/actions/sshd-conf

@@ -84,14 +84,15 @@ SKIP: {
 
 my $db = esmith::ConfigDB->open_ro or die "Could not open config db";
 
-# Recomment the key in case the SystemName or DomainName changed.
-my @change = (-f "/etc/ssh/ssh_host_key") ? ("-c", "-P", "")
+for my $typek (qw(dsa rsa ecdsa ed25519)) {
+    # Recomment the key in case the SystemName or DomainName changed.
+    my @change = (-f "/etc/ssh/ssh_host_${typek}_key") ? ("-c", "-P", "")
                                           : ("-q", "-N", "");
-
-esmith::util::backgroundCommand (0,
-    "/usr/bin/ssh-keygen", @change, "-t", "rsa1",
-    "-f", "/etc/ssh/ssh_host_key",
-    "-C", "root@" . $db->get('SystemName')->value . "." . $db->get('DomainName')->value);
-
+    
+    esmith::util::backgroundCommand (0,
+        "/usr/bin/ssh-keygen", @change, "-t", "$typek",
+        "-f", "/etc/ssh/ssh_host_key",
+        "-C", "root@" . $db->get('SystemName')->value . "." . $db->get('DomainName')->value);
+}
 exit (0);
 

root/etc/e-smith/templates/etc/ssh/sshd_config/40UsePrivilegeSeparation

@@ -1,2 +0,0 @@
-# Deprecated in Rocky 8
-# UsePrivilegeSeparation yes

root/etc/logrotate.d/sshd

@@ -7,7 +7,7 @@
     su root root
     create 600 root root
     postrotate
-        /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
+        /usr/bin/systemctl -s HUP kill rsyslog.service >/dev/null 2>&1 || true
     endscript
 }
 

smeserver-openssh.spec

@@ -4,7 +4,7 @@ Summary: smeserver module to configure and enable ssh
 %define name smeserver-openssh
 Name: %{name}
 %define version 11.0.0
-%define release 6
+%define release 8
 Version: %{version}
 Release: %{release}%{?dist}
 License: GPL
@@ -24,14 +24,21 @@ Provides: e-smith-openssh
 AutoReqProv: no
 
 %changelog
+* Tue Aug 13 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-8.sme
+- fix new log does not fill after log rotate [SME: 12690]
+
+* Sat Apr 13 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-7.sme
+- fix script to recomment keys [SME: 12612]
+  now comments rsa, dsa, ecdsa,ed25519. dropped rsa1
+
 * Fri Apr 12 2024 John Crisp <jcrisp@safeandsoundit.co.uk> 11.0.0-6.sme
-- Remove option UsePrivilegeSeparation  [SME: 12564]
+- Remove option UsePrivilegeSeparation [SME: 12564]
 
 * Thu Apr 04 2024 Brian Read <brianr@koozali.org> 11.0.0-5.sme
-- Update createlinks to create smeserver-package-update event  [SME: 12579]
+- Update createlinks to create smeserver-package-update event [SME: 12579]
 
 * Thu Apr 04 2024 Brian Read <brianr@koozali.org> 11.0.0-4.sme
-- Set license file to GPL2.0  [SME: 12577]
+- Set license file to GPL2.0 [SME: 12577]
 
 * Tue Mar 26 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-3.sme
 - remove RSA1 support which prevents service start  [SME: 12553]
@@ -43,7 +50,6 @@ AutoReqProv: no
 - Update Release and Version to base version and 1st release for SME11 [SME: 12518]
 - Move Provides: from after Changelog 
 
-
 * Mon Mar 11 2024 rename-e-smith-pkg.sh by Trevor Batley <trevor@batley.id.au> 2.6.0-9.sme
 - Rename to smeserver-openssh [SME: 12359]
 
@@ -380,7 +386,7 @@ AutoReqProv: no
 - [1.5.4-01]
 - add -t option to ssh-keygen call in sshd-conf [tonyc]
 
-* Fri Mar  6 2002 Michael G Schwern <schwern@e-smith.com>
+* Fri Mar  8 2002 Michael G Schwern <schwern@e-smith.com>
 - [1.5.3-01]
 - Tested & documented sshd-reload action [schwern 2932]
 - Tested & documented sshd-conf and sshd-conf-startup actions [schwern 2932]