sshd appears to be broken when both host rsa and dsa key file present

Matthew Dillon dillon at apollo.backplane.com
Mon Jan 26 08:45:00 PST 2009


:Would there really be any reason to change it back.  I assume they changed RSA
:to being the default is because the patent is expired.  Also, according to my
:notes,
:
:    RSA is preferable in most cases, since DSA is slower
:    and cannot encrypt in and of itself (DSA is a signing
:    algorithm only).  RSA can be used to encrypt files.

    Yes, because ssh will unexpectedly stop working in automated scripts
    if we change the default as the related keys will not be in the 
    known_hosts file.

					-Matt
					Matthew Dillon 
					<dillon at backplane.com>





More information about the Bugs mailing list