[Bug 3805] New: sshd requires a reload or restart when a new identity key is generated

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Apr 1 08:28:48 AEDT 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3805

            Bug ID: 3805
           Summary: sshd requires a reload or restart when a new identity
                    key is generated
           Product: Portable OpenSSH
           Version: 9.8p1
          Hardware: ARM64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: syaghi at ciena.com

Hi,

 I was previously running openSSH 9.6p1 and have upgraded to 9.9p2. I
noticed since upgrading that if I generate a new identity key for my
server (using ssh-keygen) and replace the old key files with the new
keys,  the old key continues to be sent to clients until I reload or
restart the sshd service. 

When I was running 9.6p1, I didn't have to reload or restart the sshd
service when I changed the server's identity key; New client
connections were getting the server's new key.

I couldn't find a note in the SSH release notes that sshd requires a
reload/restart when the server identity key is changed. Is this
expected? If so, is there a way to tell sshd to always read the key
from the file so a reload/restart of sshd is not required?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list