From 9b8f0814a7ad3e05f5e6dedb1e5ceca0981eae12 Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Mon, 10 Feb 2014 03:44:30 +0000 Subject: Drop long-obsolete "SSH now uses protocol 2 by default" section from README.Debian. --- debian/README.Debian | 28 ---------------------------- debian/changelog | 2 ++ 2 files changed, 2 insertions(+), 28 deletions(-) diff --git a/debian/README.Debian b/debian/README.Debian index f37cce4b0..00dfea13d 100644 --- a/debian/README.Debian +++ b/debian/README.Debian @@ -49,34 +49,6 @@ incorrect, and feel strongly enough to want to argue about it, then send email to debian-ssh@lists.debian.org. I will close bug reports claiming the default is incorrect. -SSH now uses protocol 2 by default ----------------------------------- - -This means all your keyfiles you used for protocol version 1 need to -be re-generated. The server keys are done automatically, but for RSA -authentication, please read the ssh-keygen manpage. - -If you have an automatically generated configuration file, and decide -at a later stage that you do want to support protocol version 1 (not -recommended, but note that the ssh client shipped with Debian potato -only supported protocol version 1), then you need to do the following: - -Change /etc/ssh/sshd_config such that: -Protocol 2 -becomes: -Protocol 2,1 -Also add the line: -HostKey /etc/ssh/ssh_host_key - -If you do not already have an RSA1 host key in /etc/ssh/ssh_host_key, -you will need to generate one. To do so, run this command as root: - - ssh-keygen -f /etc/ssh/ssh_host_key -N '' -t rsa1 - -As of openssh-server 1:4.1p1-2, the option to support protocol version 1 -is no longer available via debconf. You must edit the configuration file -instead. - X11 Forwarding -------------- diff --git a/debian/changelog b/debian/changelog index b195b6708..5dc215554 100644 --- a/debian/changelog +++ b/debian/changelog @@ -26,6 +26,8 @@ openssh (1:6.5p1-1) UNRELEASED; urgency=medium to add such host keys should manually add 'HostKey /etc/ssh/ssh_host_ed25519_key' to /etc/ssh/sshd_config and run 'ssh-keygen -q -f /etc/ssh/ssh_host_ed25519_key -N "" -t ed25519'. + * Drop long-obsolete "SSH now uses protocol 2 by default" section from + README.Debian. -- Colin Watson Sun, 09 Feb 2014 15:52:14 +0000 -- cgit v1.2.3