alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity

ssh: deprecate use of old DSA keys

Browse source 
They are not safe and shouldn't be used.
This commit is contained in:
Peter Hoeg 2016-10-06 14:37:38 +08:00 committed by Peter Hoeg
parent 2fdfefa2da
commit 65b73d71cb
1 changed files with 2 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
nixos/modules/services/networking/ssh/sshd.nix
View file

@ -363,12 +363,9 @@ in
HostKey ${k.path}
'')}
# Allow DSA client keys for now. (These were deprecated
# in OpenSSH 7.0.)
PubkeyAcceptedKeyTypes +ssh-dss
# Re-enable DSA host keys for now.
${optionalString supportOldHostKeys ''
# Allow DSA keys for now. (deprecated in OpenSSH 7.0)
PubkeyAcceptedKeyTypes +ssh-dss
HostKeyAlgorithms +ssh-dss
''}
'';