i never did write a grumble post about the debian ssl exploit (great explanation of the issue and some motivational posters) and i’m still finding issues because of the new keys. the lastest issue i was trying to debug why i wasn’t able to connect to one of my boxes via nxclient. checking around in the logs i saw, “Offending key in /usr/NX/home/nx/.ssh/known_hosts”… simple enough.

after looking at that file and comparing it to /etc/ssh/ssh_host_rsa_key and /etc/ssh/ssh_host_rsa_key.broken i drop in the new keys and nxclient connects just fine. i would also recommend regenerating your personal keys if you use an authorized_keys[2] file