Stop generating DSA host keys by default (thanks, Santiago Vila; closes: #823827).

1 files changed, 0 insertions, 2 deletions

diff --git a/debian/openssh-server.postinst b/debian/openssh-server.postinst
index 45121534d..ff61c4f1b 100644
--- a/debian/openssh-server.postinst
+++ b/debian/openssh-server.postinst
@@ -81,7 +81,6 @@ host_keys_required() {
                 # No HostKey directives at all, so the server picks some
                 # defaults.
                 echo /etc/ssh/ssh_host_rsa_key
-                echo /etc/ssh/ssh_host_dsa_key
                 echo /etc/ssh/ssh_host_ecdsa_key
                 echo /etc/ssh/ssh_host_ed25519_key
         fi
@@ -173,7 +172,6 @@ Port 22
 Protocol 2
 # HostKeys for protocol version 2
 HostKey /etc/ssh/ssh_host_rsa_key
-HostKey /etc/ssh/ssh_host_dsa_key
 HostKey /etc/ssh/ssh_host_ecdsa_key
 HostKey /etc/ssh/ssh_host_ed25519_key
 #Privilege Separation is turned on for security