Rolling back SSH

mrurmil · 02-15-2007, 10:52 AM

Hi,

How can I rollback the default installed version of SSH (4.x) in FC6 to 1.2.30? This box will not be on the net, I'm doing this as an experiment for a network security course. I have the ssh-1.2.30-1i.i386.rpm. I tried doing rpm -e openssh and it told me that there are dependencies. So I tried to rpm -e all the dependent programs and then rpm -e openssh after. Then I doube clicked the RPM and it installed. However, when I run nmap it still shows that I'm running SSH 4.x.

Am I doing something wrong?

Thanks

MensaWater · 02-15-2007, 02:08 PM

Did you stop sshd before trying to do this?

Are you logged in via the console? Obviously ssh would be in use if you had done an ssh into the system.

Have you figured out all the dependencies you'll need? This can be quite maddening especially for old versions of utilities.

unSpawn · 02-17-2007, 05:35 AM

With RPM there is a subtle difference between removing packages (-e) and a rollback. If you want to have rollback capabilities you have to prepare for it beforehand by doing "rpm --repackage -e thepackagename". A good explanation is here: Transactions and Rollback with RPM(Linuxjournal, 2004).