Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/etc/rc.d /etc/rc.d/sshd: Stop generating DSA host keys by de...



details:   https://anonhg.NetBSD.org/src/rev/65462c53a96b
branches:  trunk
changeset: 376230:65462c53a96b
user:      riastradh <riastradh%NetBSD.org@localhost>
date:      Mon Jun 05 11:51:19 2023 +0000

description:
/etc/rc.d/sshd: Stop generating DSA host keys by default.

If you want them you can generate them yourself, but in this day and
age (Monday and 2023, specifically) there's no reason to be using DSA
except for compatibility with ancient legacy software.

diffstat:

 etc/rc.d/sshd |  3 +--
 1 files changed, 1 insertions(+), 2 deletions(-)

diffs (19 lines):

diff -r bfbe023bf6d9 -r 65462c53a96b etc/rc.d/sshd
--- a/etc/rc.d/sshd     Mon Jun 05 10:12:21 2023 +0000
+++ b/etc/rc.d/sshd     Mon Jun 05 11:51:19 2023 +0000
@@ -1,6 +1,6 @@
 #!/bin/sh
 #
-# $NetBSD: sshd,v 1.33 2023/05/26 10:44:59 riastradh Exp $
+# $NetBSD: sshd,v 1.34 2023/06/05 11:51:19 riastradh Exp $
 #
 
 # PROVIDE: sshd
@@ -61,7 +61,6 @@ sshd_keygen()
                    printf "ssh-keygen: " && "${keygen}" -f "${f}" -l
                new_key_created=true
        done << _EOF
-dsa    1024    ssh_host_dsa_key
 ecdsa  521     ssh_host_ecdsa_key
 ed25519        -1      ssh_host_ed25519_key
 rsa    0       ssh_host_rsa_key



Home | Main Index | Thread Index | Old Index