From owner-freebsd-hackers Sun May 13 15:11:53 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from peter3.wemm.org (c1315225-a.plstn1.sfba.home.com [65.0.135.147]) by hub.freebsd.org (Postfix) with ESMTP id EA9C837B422 for ; Sun, 13 May 2001 15:11:50 -0700 (PDT) (envelope-from peter@wemm.org) Received: from overcee.netplex.com.au (overcee.wemm.org [10.0.0.3]) by peter3.wemm.org (8.11.0/8.11.0) with ESMTP id f4DMBoM44444 for ; Sun, 13 May 2001 15:11:50 -0700 (PDT) (envelope-from peter@wemm.org) Received: from wemm.org (localhost [127.0.0.1]) by overcee.netplex.com.au (Postfix) with ESMTP id C499B380C; Sun, 13 May 2001 15:11:50 -0700 (PDT) (envelope-from peter@wemm.org) X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 To: thomas@cuivre.fr.eu.org Cc: hackers@FreeBSD.ORG Subject: Re: SSH Must Die In-Reply-To: <20010514000028.B59747@melusine.cuivre.fr.eu.org> Content-Transfer-Encoding: 8bit Date: Sun, 13 May 2001 15:11:50 -0700 From: Peter Wemm Message-Id: <20010513221150.C499B380C@overcee.netplex.com.au> Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Thomas Quinot wrote: > Le 2001-05-13, Peter Wemm écrivait : > > > The simplest thing is to do a ssh-keygen to generate a new RSA key and > > update ~/.ssh/authorized_keys2 once per remote machine that you connect > > to. Once that is done, it never bothers you again. You can change > > /etc/ssh/ssh_config so that it says 'Protocol 1,2', but that is avoiding > > the problem rather than using the more robust, cryptographically secure > > sshv2 wire protocol. > > Ah. This seems to work around the very unfortunate situation described in > PR bin/27264. It seems very strange that one has to change the setup > on the *server* side to work around a regression on the client side. > > Why cannot one use the same RSA public key for v1 and v2 client > authentication? That is something that I'd like to know too. RSA keys are RSA keys, regardless of how they are encoded. Cheers, -Peter -- Peter Wemm - peter@FreeBSD.org; peter@yahoo-inc.com; peter@netplex.com.au "All of this is for nothing if we don't go to the stars" - JMS/B5 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message