It only makes debugging harder as our translations are being
completed one after the other. Also has the positive side-
effect of freeing a few hard-to-do translations in the process.
for reference:
/usr/local/etc/rc.sshd: The command '/usr/local/bin/ssh-keygen -t rsa1 -N "" -f /usr/local/etc/ssh/ssh_host_key' returned exit code '1', the output was 'Saving key "/usr/local/etc/ssh/ssh_host_key" failed: unknown or unsupported key type Generating public/private rsa1 key pair.'
We don't have OpenSSH in base anymore so we can zap the fallback.
And since openssh-portable is a direct dependency of opnsense, we
can be pretty sure it'll be there.
* Prefer the openssh-portable port, but fall back to the base
version if it is available.
* Refactor the key generation to produce less duplicated code.
* Locking is completely bogus, but I have no clue how to fix
that short term without doing a full audit of the subsystem-dirty
mechanic.
Make "src" the implicit "/usr/local" so that nobody can
sneak in weird files in the base file system or potentially
overwrite them.
This is the last time, I swear... :)
