summaryrefslogtreecommitdiff
path: root/etc
diff options
context:
space:
mode:
authorriastradh <riastradh@NetBSD.org>2023-06-05 11:51:19 +0000
committerriastradh <riastradh@NetBSD.org>2023-06-05 11:51:19 +0000
commitd9a57d2b7cad390d5fdfaed23cc6ba5d51f6c106 (patch)
tree991597d3efeee98967db24c86733cb6c3379abe3 /etc
parent5cff73978e28e3de850793a4c9543d4338102c1d (diff)
/etc/rc.d/sshd: Stop generating DSA host keys by default.
If you want them you can generate them yourself, but in this day and age (Monday and 2023, specifically) there's no reason to be using DSA except for compatibility with ancient legacy software.
Diffstat (limited to 'etc')
-rwxr-xr-xetc/rc.d/sshd3
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/rc.d/sshd b/etc/rc.d/sshd
index a8e6c9156b1..03cd36d4294 100755
--- a/etc/rc.d/sshd
+++ b/etc/rc.d/sshd
@@ -1,6 +1,6 @@
#!/bin/sh
#
-# $NetBSD: sshd,v 1.33 2023/05/26 10:44:59 riastradh Exp $
+# $NetBSD: sshd,v 1.34 2023/06/05 11:51:19 riastradh Exp $
#
# PROVIDE: sshd
@@ -61,7 +61,6 @@ sshd_keygen()
printf "ssh-keygen: " && "${keygen}" -f "${f}" -l
new_key_created=true
done << _EOF
-dsa 1024 ssh_host_dsa_key
ecdsa 521 ssh_host_ecdsa_key
ed25519 -1 ssh_host_ed25519_key
rsa 0 ssh_host_rsa_key