sshd fails to load ECDSA key after upgrade to RHEL7.4

Solution Verified - Updated -

Issue

After upgrading openssl to openssl-1.0.2 in RHEL7.4 the sshd service fails to load the ECDSA host key and gives one of the following errors.

Error with openssh-6.6.1p1-31.el7

Sep  7 12:30:11 rhel7-64 sshd[24222]: key_parse_private_pem: bad ECDSA key
Sep  7 12:30:11 rhel7-64 sshd[24222]: Could not load host key: /etc/ssh/ssh_host_ecdsa_key

Error with openssh-7.4p1-11.el7

Sep  7 12:30:42 rhel7-64 sshd: key_load_private: invalid format
Sep  7 12:30:42 rhel7-64 sshd: Could not load host key: /etc/ssh/ssh_host_ecdsa_key

Environment

  • RHEL7
  • openssh
  • openssl-1.0.2

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content