summaryrefslogtreecommitdiff
path: root/debian/README.Debian
diff options
context:
space:
mode:
Diffstat (limited to 'debian/README.Debian')
-rw-r--r--debian/README.Debian28
1 files changed, 0 insertions, 28 deletions
diff --git a/debian/README.Debian b/debian/README.Debian
index f37cce4b0..00dfea13d 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -49,34 +49,6 @@ incorrect, and feel strongly enough to want to argue about it, then
49send email to debian-ssh@lists.debian.org. I will close bug reports 49send email to debian-ssh@lists.debian.org. I will close bug reports
50claiming the default is incorrect. 50claiming the default is incorrect.
51 51
52SSH now uses protocol 2 by default
53----------------------------------
54
55This means all your keyfiles you used for protocol version 1 need to
56be re-generated. The server keys are done automatically, but for RSA
57authentication, please read the ssh-keygen manpage.
58
59If you have an automatically generated configuration file, and decide
60at a later stage that you do want to support protocol version 1 (not
61recommended, but note that the ssh client shipped with Debian potato
62only supported protocol version 1), then you need to do the following:
63
64Change /etc/ssh/sshd_config such that:
65Protocol 2
66becomes:
67Protocol 2,1
68Also add the line:
69HostKey /etc/ssh/ssh_host_key
70
71If you do not already have an RSA1 host key in /etc/ssh/ssh_host_key,
72you will need to generate one. To do so, run this command as root:
73
74 ssh-keygen -f /etc/ssh/ssh_host_key -N '' -t rsa1
75
76As of openssh-server 1:4.1p1-2, the option to support protocol version 1
77is no longer available via debconf. You must edit the configuration file
78instead.
79
80X11 Forwarding 52X11 Forwarding
81-------------- 53--------------
82 54