Gentoo Archives: gentoo-dev

From: Mike Gilbert <floppym@g.o>
To: Gentoo Dev <gentoo-dev@l.g.o>
Subject: Re: [gentoo-dev] [PATCH] document openssh-7.0 dsa key change #557388
Date: Fri, 14 Aug 2015 14:28:20
Message-Id: CAJ0EP42bFnHPumLOmb+esMB+b0yK1UGfyOGfKXnbf74oz-qB9w@mail.gmail.com
In Reply to: Re: [gentoo-dev] [PATCH] document openssh-7.0 dsa key change #557388 by Mike Frysinger
1 On Thu, Aug 13, 2015 at 8:33 PM, Mike Frysinger <vapier@g.o> wrote:
2 > On 13 Aug 2015 17:18, Mike Gilbert wrote:
3 >> On Wed, Aug 12, 2015 at 11:17 PM, Mike Frysinger <vapier@g.o> wrote:
4 >> > +If you are stuck with DSA keys, you can re-enable support locally by
5 >> > +updating your sshd_config file with a line like so:
6 >> > + PubkeyAcceptedKeyTypes=+ssh-dss
7 >>
8 >> I think this should also mention that PubkeyAcceptedKeyTypes applies
9 >> to the ssh client, and can be added to ~/.ssh/config.
10 >
11 > it applies to both. if the server doesn't have it, it won't accept what
12 > the client offers.
13
14 Yep, that's actually what I meant: PubkeyAcceptedKeyTypes applies to
15 the client in addition to the server.