Remove entries related to protocol 1 from the default sshd_config generated on new installations.

2 files changed, 2 insertions, 7 deletions

diff --git a/debian/changelog b/debian/changelog
index c2065c580..d2eb7f643 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -115,6 +115,8 @@ openssh (1:7.4p1-1) UNRELEASED; urgency=medium
     - sshd(8): Improve PRNG reseeding across privilege separation and force
       libcrypto to obtain a high-quality seed before chroot or sandboxing.
   * Apply "wrap-and-sort -at -f debian/control -f debian/tests/control".
+  * Remove entries related to protocol 1 from the default sshd_config
+    generated on new installations.
 
  -- Colin Watson <cjwatson@debian.org>  Mon, 05 Dec 2016 19:31:33 +0000
 
diff --git a/debian/openssh-server.postinst b/debian/openssh-server.postinst
index ff61c4f1b..35a6b477b 100644
--- a/debian/openssh-server.postinst
+++ b/debian/openssh-server.postinst
@@ -177,10 +177,6 @@ HostKey /etc/ssh/ssh_host_ed25519_key
 #Privilege Separation is turned on for security
 UsePrivilegeSeparation yes
 
-# Lifetime and size of ephemeral version 1 server key
-KeyRegenerationInterval 3600
-ServerKeyBits 1024
-
 # Logging
 SyslogFacility AUTH
 LogLevel INFO
@@ -190,15 +186,12 @@ LoginGraceTime 120
 PermitRootLogin prohibit-password
 StrictModes yes
 
-RSAAuthentication yes
 PubkeyAuthentication yes
 #AuthorizedKeysFile     %h/.ssh/authorized_keys
 
 # Don't read the user's ~/.rhosts and ~/.shosts files
 IgnoreRhosts yes
 # For this to work you will also need host keys in /etc/ssh_known_hosts
-RhostsRSAAuthentication no
-# similar for protocol version 2
 HostbasedAuthentication no
 # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
 #IgnoreUserKnownHosts yes