2 files changed, 17 insertions, 0 deletions

diff --git a/debian/README.Debian b/debian/README.Debian
index 43a3551ca..73b7cfc89 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -237,6 +237,21 @@ Non-systemd users may find /usr/lib/openssh/ssh-session-cleanup helpful if
 they have a similar problem, although at present there is no system
 integration for this for anything other than systemd.
 
+SSH protocol 1 server support removed
+-------------------------------------
+
+sshd(8) no longer supports the old SSH protocol 1, so all the configuration
+options related to it are now deprecated and should be removed from
+/etc/ssh/sshd_config.  These are:
+
+  KeyRegenerationInterval
+  RSAAuthentication
+  RhostsRSAAuthentication
+  ServerKeyBits
+
+The Protocol option is also no longer needed, although it is silently
+ignored rather than deprecated.
+
 -- 
 Matthew Vernon <matthew@debian.org>
 Colin Watson <cjwatson@debian.org>
diff --git a/debian/changelog b/debian/changelog
index 5e5ad70ef..a7a936707 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,8 @@ openssh (1:7.4p1-6) UNRELEASED; urgency=medium
   * Remove temporary file on exit from postinst (closes: #850275).
   * Remove LOGIN_PROGRAM and LOGIN_NO_ENDOPT definitions, since UseLogin is
     gone.
+  * Document sshd_config changes that may be needed following the removal of
+    protocol 1 support from sshd (closes: #851573).
 
  -- Colin Watson <cjwatson@debian.org>  Fri, 06 Jan 2017 08:40:14 +0000