By default Readynas uses a weak SSH key and apache configurations.
Regenerate SSH keys by running the follow:
[code]
# ssh-keygen -t rsa1 -f "/etc/ssh/ssh_host_key" -N ”
# ssh-keygen -t rsa -f "/etc/ssh/ssh_host_rsa_key" -N ”
# ssh-keygen -t dsa -f "/etc/ssh/ssh_host_dsa_key" -N ”
[/code]
Securing apache running the follow:
[code]
vi /etc/frontview/apache/httpd.conf
[/code]
Add the following
[code]
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
TraceEnable off
[/code]
run the follow to restart the apache server
[code]
# killall apache-ssl
# /usr/sbin/apache-ssl -f /etc/frontview/apache/httpd.conf
[/code]
Leave a Reply