From: Jan Rękorajski <baggins@pld-linux.org>
Date: Mon, 1 Mar 2021 09:00:03 +0000 (+0100)
Subject: - don't generate DSA server host keys, this weak algo was run-time disabled in openss... 
X-Git-Tag: auto/th/openssh-8.4p1-5~2
X-Git-Url: http://git.pld-linux.org/?p=packages%2Fopenssh.git;a=commitdiff_plain;h=68aac8482f0fe7ece509f628daad9d04f40d1d13;ds=sidebyside

- don't generate DSA server host keys, this weak algo was run-time disabled in openssh 7.0 (6 years ago)

http://www.openssh.com/txt/release-7.0
---

diff --git a/sshd-keygen b/sshd-keygen
index a090614..1353fc1 100755
--- a/sshd-keygen
+++ b/sshd-keygen
@@ -16,6 +16,4 @@ ssh_gen_key() {
 
 # generate new keys with empty passwords if they do not exist
 ssh_gen_key ed25519 /etc/ssh/ssh_host_ed25519_key
-ssh_gen_key ecdsa /etc/ssh/ssh_host_ecdsa_key
 ssh_gen_key rsa /etc/ssh/ssh_host_rsa_key
-ssh_gen_key dsa /etc/ssh/ssh_host_dsa_key