diff options
author | kemal <kemalinanc8@gmail.com> | 2021-09-02 13:28:48 +0000 |
---|---|---|
committer | kemal <kemalinanc8@gmail.com> | 2021-09-02 13:28:48 +0000 |
commit | 1a444750d6c331f8b96a8df986fbb239dd20d293 (patch) | |
tree | 62d18499bb82560a352b199b48008f64cdf7f96b /sys/lib | |
parent | 19a548fd49572bf41df08f2e29f96a2f1c88258b (diff) |
ssh: use RSA/SHA-256 instead of RSA/SHA-1 as the public key algorithm
openssh now disables RSA/SHA-1 by default, so using RSA/SHA-1 will
eventually cause us problems:
https://undeadly.org/cgi?action=article;sid=20210830113413
in addition, github will disable RSA/SHA-1 for recently added RSA keys:
https://github.blog/2021-09-01-improving-git-protocol-security-github/
this patch modifies ssh.c to use RSA/SHA-256 (aka rsa-sha2-256)
instead of RSA/SHA-1 (aka ssh-rsa) as the public key algorithm.
NOTE: public rsa keys and thumbprints are ***NOT AFFECTED***
by this patch.
while we're here, remove the workaround for github.com. it seems
that github has fixed their implementation, and does not look into
macalgs when we're using an aead cipher.
---
Diffstat (limited to 'sys/lib')
0 files changed, 0 insertions, 0 deletions