summaryrefslogtreecommitdiff
path: root/sys/lib
diff options
context:
space:
mode:
authorkemal <kemalinanc8@gmail.com>2021-09-02 13:28:48 +0000
committerkemal <kemalinanc8@gmail.com>2021-09-02 13:28:48 +0000
commit1a444750d6c331f8b96a8df986fbb239dd20d293 (patch)
tree62d18499bb82560a352b199b48008f64cdf7f96b /sys/lib
parent19a548fd49572bf41df08f2e29f96a2f1c88258b (diff)
ssh: use RSA/SHA-256 instead of RSA/SHA-1 as the public key algorithm
openssh now disables RSA/SHA-1 by default, so using RSA/SHA-1 will eventually cause us problems: https://undeadly.org/cgi?action=article;sid=20210830113413 in addition, github will disable RSA/SHA-1 for recently added RSA keys: https://github.blog/2021-09-01-improving-git-protocol-security-github/ this patch modifies ssh.c to use RSA/SHA-256 (aka rsa-sha2-256) instead of RSA/SHA-1 (aka ssh-rsa) as the public key algorithm. NOTE: public rsa keys and thumbprints are ***NOT AFFECTED*** by this patch. while we're here, remove the workaround for github.com. it seems that github has fixed their implementation, and does not look into macalgs when we're using an aead cipher. ---
Diffstat (limited to 'sys/lib')
0 files changed, 0 insertions, 0 deletions