From 518e17256091506e66f0c72a98cd3ba809c5dd5e Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Wed, 26 Jan 2011 23:43:39 +0000 Subject: adjust ECDSA commentary in changelog - we aren't generating ECDSA host keys on upgrades --- debian/changelog | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/debian/changelog b/debian/changelog index db042473c..88b78ce15 100644 --- a/debian/changelog +++ b/debian/changelog @@ -25,9 +25,10 @@ openssh (1:5.7p1-1) UNRELEASED; urgency=low * Update to current GSSAPI patch from http://www.sxw.org.uk/computing/patches/openssh-5.7p1-gsskex-all-20110125.patch: - Add GSSAPIServerIdentity option. - * Generate ECDSA host keys. These will only be used on fresh - installations or if you manually add 'HostKey - /etc/ssh/ssh_host_ecdsa_key' to /etc/ssh/sshd_config. + * Generate ECDSA host keys on fresh installations. Upgraders who wish to + add such host keys should manually add 'HostKey + /etc/ssh/ssh_host_ecdsa_key' to /etc/ssh/sshd_config and run 'ssh-keygen + -q -f /etc/ssh/sshd_config -N "" -t ecdsa'. * Build-depend on libssl-dev (>= 0.9.8g) to ensure sufficient ECC support. * Backport SELinux build fix from CVS. * Rearrange selinux-role.patch so that it links properly given this -- cgit v1.2.3