diff options
| author |   Repository mirror & CI <repomirrorci@gentoo.org> | 2021-10-08 22:21:38 +0000 |
|---|---|---|
| committer | Repository mirror & CI <repomirrorci@gentoo.org> | 2021-10-08 22:21:38 +0000 |
| commit | f2ff014aea1669dae6e2c2333617bf6970db8aef (patch) | |
| tree | 71d31054488ec4b5a0aa3eaa6ac3f3802747be56 /metadata/news | |
| parent | 2021-10-08 22:06:46 UTC (diff) | |
| parent | 2021-10-08-openssh-rsa-sha1: add news item (diff) | |
| download | gentoo-f2ff014aea1669dae6e2c2333617bf6970db8aef.tar.gz gentoo-f2ff014aea1669dae6e2c2333617bf6970db8aef.tar.bz2 gentoo-f2ff014aea1669dae6e2c2333617bf6970db8aef.zip | |
Merge commit '8dea6aa24c3ec9ee9a391fb602733c1a803a1ad1'
Diffstat (limited to 'metadata/news')
| -rw-r--r-- | metadata/news/2021-10-08-openssh-rsa-sha1/2021-10-08-openssh-rsa-sha1.en.txt | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/metadata/news/2021-10-08-openssh-rsa-sha1/2021-10-08-openssh-rsa-sha1.en.txt b/metadata/news/2021-10-08-openssh-rsa-sha1/2021-10-08-openssh-rsa-sha1.en.txt new file mode 100644 index 000000000000..cfdcc4a32d38 --- /dev/null +++ b/metadata/news/2021-10-08-openssh-rsa-sha1/2021-10-08-openssh-rsa-sha1.en.txt @@ -0,0 +1,26 @@ +Title: OpenSSH RSA SHA-1 signatures +Author: Mike Gilbert <floppym@gentoo.org> +Posted: 2021-10-08 +Revision: 1 +News-Item-Format: 2.0 +Display-If-Installed: net-misc/openssh + +As of version 8.8, OpenSSH disables RSA signatures using the SHA-1 +hash algorithm by default. This change affects both the client and +server components. + +After upgrading to this version, you may have trouble connecting to +older SSH servers that do not support the newer RSA/SHA-256/SHA-512 +signatures. Support for these signatures was added in OpenSSH 7.2. + +As well, you may have trouble using older SSH clients to connect to a +server running OpenSSH 8.8 or higher. Some older clients do not +automatically utilize the newer hashes. For example, PuTTY before +version 0.75 is affected. + +To resolve these problems, please upgrade your SSH client/server +whereever possible. If this is not feasible, support for the SHA-1 +hashes may be re-enabled using the following config options: + +HostkeyAlgorithms +ssh-rsa +PubkeyAcceptedAlgorithms +ssh-rsa |