summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorfanf <fanf@FreeBSD.org>2002-07-26 15:16:56 +0000
committerfanf <fanf@FreeBSD.org>2002-07-26 15:16:56 +0000
commitb26a01d35d82e591dd1c580e6050197062ca83f8 (patch)
treefb23d83967d90ad4c89adebea45768a1c2bc64ef
parentc259f4f6b15defd515ec0050360eeaac48182a4d (diff)
downloadFreeBSD-src-b26a01d35d82e591dd1c580e6050197062ca83f8.zip
FreeBSD-src-b26a01d35d82e591dd1c580e6050197062ca83f8.tar.gz
FreeBSD doesn't use the host RSA key by default.
Reviewed by: des
-rw-r--r--crypto/openssh/sshd.86
-rw-r--r--crypto/openssh/sshd_config1
-rw-r--r--crypto/openssh/sshd_config.52
3 files changed, 2 insertions, 7 deletions
diff --git a/crypto/openssh/sshd.8 b/crypto/openssh/sshd.8
index 147d8be..5c04ae0 100644
--- a/crypto/openssh/sshd.8
+++ b/crypto/openssh/sshd.8
@@ -217,8 +217,6 @@ host key files are normally not readable by anyone but root).
The default is
.Pa /etc/ssh/ssh_host_key
for protocol version 1, and
-.Pa /etc/ssh/ssh_host_rsa_key
-and
.Pa /etc/ssh/ssh_host_dsa_key
for protocol version 2.
It is possible to have multiple host key files for
@@ -562,14 +560,14 @@ Contains configuration data for
.Nm sshd .
The file format and configuration options are described in
.Xr sshd_config 5 .
-.It Pa /etc/ssh/ssh_host_key, /etc/ssh/ssh_host_dsa_key, /etc/ssh/ssh_host_rsa_key
+.It Pa /etc/ssh/ssh_host_key, /etc/ssh/ssh_host_dsa_key
These three files contain the private parts of the host keys.
These files should only be owned by root, readable only by root, and not
accessible to others.
Note that
.Nm
does not start if this file is group/world-accessible.
-.It Pa /etc/ssh/ssh_host_key.pub, /etc/ssh/ssh_host_dsa_key.pub, /etc/ssh/ssh_host_rsa_key.pub
+.It Pa /etc/ssh/ssh_host_key.pub, /etc/ssh/ssh_host_dsa_key.pub
These three files contain the public parts of the host keys.
These files should be world-readable but writable only by
root.
diff --git a/crypto/openssh/sshd_config b/crypto/openssh/sshd_config
index c1d0bc9..f01c854 100644
--- a/crypto/openssh/sshd_config
+++ b/crypto/openssh/sshd_config
@@ -24,7 +24,6 @@
# HostKey for protocol version 1
#HostKey /etc/ssh/ssh_host_key
# HostKeys for protocol version 2
-#HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_dsa_key
# Lifetime and size of ephemeral version 1 server key
diff --git a/crypto/openssh/sshd_config.5 b/crypto/openssh/sshd_config.5
index 615ea27..5507bd6 100644
--- a/crypto/openssh/sshd_config.5
+++ b/crypto/openssh/sshd_config.5
@@ -240,8 +240,6 @@ used by SSH.
The default is
.Pa /etc/ssh/ssh_host_key
for protocol version 1, and
-.Pa /etc/ssh/ssh_host_rsa_key
-and
.Pa /etc/ssh/ssh_host_dsa_key
for protocol version 2.
Note that
OpenPOWER on IntegriCloud