diff options
Diffstat (limited to 'debian/README.Debian')
-rw-r--r-- | debian/README.Debian | 28 |
1 files changed, 0 insertions, 28 deletions
diff --git a/debian/README.Debian b/debian/README.Debian index f37cce4b0..00dfea13d 100644 --- a/debian/README.Debian +++ b/debian/README.Debian | |||
@@ -49,34 +49,6 @@ incorrect, and feel strongly enough to want to argue about it, then | |||
49 | send email to debian-ssh@lists.debian.org. I will close bug reports | 49 | send email to debian-ssh@lists.debian.org. I will close bug reports |
50 | claiming the default is incorrect. | 50 | claiming the default is incorrect. |
51 | 51 | ||
52 | SSH now uses protocol 2 by default | ||
53 | ---------------------------------- | ||
54 | |||
55 | This means all your keyfiles you used for protocol version 1 need to | ||
56 | be re-generated. The server keys are done automatically, but for RSA | ||
57 | authentication, please read the ssh-keygen manpage. | ||
58 | |||
59 | If you have an automatically generated configuration file, and decide | ||
60 | at a later stage that you do want to support protocol version 1 (not | ||
61 | recommended, but note that the ssh client shipped with Debian potato | ||
62 | only supported protocol version 1), then you need to do the following: | ||
63 | |||
64 | Change /etc/ssh/sshd_config such that: | ||
65 | Protocol 2 | ||
66 | becomes: | ||
67 | Protocol 2,1 | ||
68 | Also add the line: | ||
69 | HostKey /etc/ssh/ssh_host_key | ||
70 | |||
71 | If you do not already have an RSA1 host key in /etc/ssh/ssh_host_key, | ||
72 | you will need to generate one. To do so, run this command as root: | ||
73 | |||
74 | ssh-keygen -f /etc/ssh/ssh_host_key -N '' -t rsa1 | ||
75 | |||
76 | As of openssh-server 1:4.1p1-2, the option to support protocol version 1 | ||
77 | is no longer available via debconf. You must edit the configuration file | ||
78 | instead. | ||
79 | |||
80 | X11 Forwarding | 52 | X11 Forwarding |
81 | -------------- | 53 | -------------- |
82 | 54 | ||