* Remove the check for vulnerable host keys; this was first added five

  years ago, and everyone should have upgraded through a version that
  applied these checks by now.  The ssh-vulnkey tool and the blacklisting
  support in sshd are still here, at least for the moment.
* This removes the last of our uses of debconf (closes: #221531).

1 files changed, 0 insertions, 40 deletions

diff --git a/debian/openssh-server.postinst b/debian/openssh-server.postinst
index 94461083e..a438a4e06 100644
--- a/debian/openssh-server.postinst
+++ b/debian/openssh-server.postinst
@@ -3,9 +3,6 @@
 action="$1"
 oldversion="$2"
 
-. /usr/share/debconf/confmodule
-db_version 2.0
-
 umask 022
 
 
@@ -126,35 +123,6 @@ create_keys() {
 }
 
 
-vulnerable_host_keys() {
-        # If the admin has explicitly put the vulnerable keys back, we
-        # assume they can look after themselves.
-        db_fget ssh/vulnerable_host_keys seen
-        if [ "$RET" = true ]; then
-                return 0
-        fi
-
-        hostkeys="$(host_keys_required)"
-        vulnerable=
-        for hostkey in $hostkeys; do
-                [ -f "$hostkey" ] || continue
-                if ssh-vulnkey -q "$hostkey"; then
-                        vulnerable="${vulnerable:+$vulnerable }$hostkey"
-                fi
-        done
-        if [ "$vulnerable" ]; then
-                db_subst ssh/vulnerable_host_keys HOST_KEYS "$vulnerable"
-                db_input critical ssh/vulnerable_host_keys || true
-                db_go
-                for hostkey in $vulnerable; do
-                        mv "$hostkey" "$hostkey.broken" || true
-                        mv "$hostkey.pub" "$hostkey.pub.broken" || true
-                done
-                create_keys
-        fi
-}
-
-
 fix_loglevel_silent() {
         if [ "$(get_config_option LogLevel)" = SILENT ]; then
                 set_config_option LogLevel QUIET
@@ -299,7 +267,6 @@ remove_old_init_links() {
 if [ "$action" = configure ]; then
         create_sshdconfig
         create_keys
-        vulnerable_host_keys
         fix_statoverride
         setup_sshd_user
         if dpkg --compare-versions "$2" lt 1:5.2p1-1; then
@@ -312,15 +279,8 @@ if [ "$action" = configure ]; then
         if dpkg --compare-versions "$2" lt 1:5.5p1-6; then
             rm -f /var/run/sshd/.placeholder
         fi
-
-        # Clean up old debconf templates.
-        db_unregister ssh/use_old_init_script
-        db_unregister ssh/encrypted_host_key_but_no_keygen
-        db_unregister ssh/disable_cr_auth
 fi
 
 #DEBHELPER#
 
-db_stop
-
 exit 0