do not enable upstream-disabled DSA keys

reenabling them (temporarily) should be consciuos admin decision to follow
transition period until they are ultimately removed from openssh. Note
the double-hash comment to indicate, that this is only a hint, not default

diff --git a/openssh-config.patch b/openssh-config.patch
index e48b3f250bbe517d3c70d622527d42ab8f4e3077..9f74e6978678100ae3b0c6d5d61d6b00d135222d 100644 (file)
--- a/openssh-config.patch
+++ b/openssh-config.patch
@@ -15,7 +15,7 @@
  #PermitEmptyPasswords no
 +
 +# Allow DSA keys
-+PubkeyAcceptedKeyTypes +ssh-dss
++## PubkeyAcceptedKeyTypes +ssh-dss
  
  # Change to no to disable s/key passwords
  #ChallengeResponseAuthentication yes