OpenSSH to deprecate SHA-1 logins due to security risk (opens in new tab)

(zdnet.com)

1 pointspedro845y ago1 comments

1 comments

http://www.openssh.com/txt/release-8.3

To check whether a server is using the weak ssh-rsa public key algorithm, for host authentication, try to connect to it after removing the ssh-rsa algorithm from ssh(1)'s allowed list:

ssh -oHostKeyAlgorithms=-ssh-rsa user@host

If the host key verification fails and no other supported host key types are available, the server software on that host should be upgraded.

j / k navigate · click thread line to collapse

1 comments

pedro84OP5y ago

http://www.openssh.com/txt/release-8.3

To check whether a server is using the weak ssh-rsa public key algorithm, for host authentication, try to connect to it after removing the ssh-rsa algorithm from ssh(1)'s allowed list:

ssh -oHostKeyAlgorithms=-ssh-rsa user@host

If the host key verification fails and no other supported host key types are available, the server software on that host should be upgraded.

j / k navigate · click thread line to collapse