Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Sep 2024 06:52:19 GMT
From:      Colin Percival <cperciva@FreeBSD.org>
To:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org
Subject:   git: 279734be11fc - main - RELNOTES: Document EC2 SSH RSA host key desupport.
Message-ID:  <202409180652.48I6qJ0w018831@gitrepo.freebsd.org>

next in thread | raw e-mail | index | archive | help
The branch main has been updated by cperciva:

URL: https://cgit.FreeBSD.org/src/commit/?id=279734be11fcdc90d7857b744f3503964e167219

commit 279734be11fcdc90d7857b744f3503964e167219
Author:     Colin Percival <cperciva@FreeBSD.org>
AuthorDate: 2024-09-18 06:51:53 +0000
Commit:     Colin Percival <cperciva@FreeBSD.org>
CommitDate: 2024-09-18 06:51:53 +0000

    RELNOTES: Document EC2 SSH RSA host key desupport.
    
    Sponsored by:   Amazon
---
 RELNOTES | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/RELNOTES b/RELNOTES
index bf0fc174e212..0daff902d4fd 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -10,6 +10,11 @@ newline.  Entries should be separated by a newline.
 
 Changes to this file should not be MFCed.
 
+0aabcd75dbc2:
+	EC2 AMIs no longer generate RSA host keys by default for SSH.  RSA
+	host key generation can be re-enabled by setting sshd_rsa_enable="YES"
+	in /etc/rc.conf if it is necessary to support very old SSH clients.
+
 a1da7dc1cdad:
 	The SO_SPLICE socket option was added.  It allows TCP connections to
 	be spliced together, enabling proxy-like functionality without the



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202409180652.48I6qJ0w018831>