refuse RSA keys from old proprietary clients/servers that use the
authordjm <djm@openbsd.org>
Mon, 30 Dec 2013 23:52:27 +0000 (23:52 +0000)
committerdjm <djm@openbsd.org>
Mon, 30 Dec 2013 23:52:27 +0000 (23:52 +0000)
commit42f7034402374e309a02cc4e386c300ca46569ee
tree66059541e823a002121f01575a788ebcf0b47d60
parent87b0c9bcf9bc0a9546625c27dcb6c7918f55795c
refuse RSA keys from old proprietary clients/servers that use the
obsolete RSA+MD5 signature scheme. it will still be possible to connect
with these clients/servers but only DSA keys will be accepted, and we'll
deprecate them entirely in a future release. ok markus@
usr.bin/ssh/auth2-hostbased.c
usr.bin/ssh/auth2-pubkey.c
usr.bin/ssh/compat.c
usr.bin/ssh/compat.h
usr.bin/ssh/ssh-rsa.c
usr.bin/ssh/sshconnect.c
usr.bin/ssh/sshconnect2.c
usr.bin/ssh/sshd.c