- don't generate DSA server host keys, this weak algo was run-time disabled in openss...

http://www.openssh.com/txt/release-7.0

diff --git a/sshd-keygen b/sshd-keygen
index a09061427521f89b8522f48a7a7af92800395e8b..1353fc1f593251ff802e57763742094bdc2ea147 100755 (executable)
--- a/sshd-keygen
+++ b/sshd-keygen
@@ -16,6 +16,4 @@ ssh_gen_key() {
 
 # generate new keys with empty passwords if they do not exist
 ssh_gen_key ed25519 /etc/ssh/ssh_host_ed25519_key
-ssh_gen_key ecdsa /etc/ssh/ssh_host_ecdsa_key
 ssh_gen_key rsa /etc/ssh/ssh_host_rsa_key
-ssh_gen_key dsa /etc/ssh/ssh_host_dsa_key