Savannah Hackers,

I upgraded vcs0 today to the next newer OpenSSH version.  This means
that all of the client facing ssh member access systems have all been
upgraded past the SHA1 obsolescence point that previously required
either upgrading to ed25519 keys or using the following workaround.

    HostkeyAlgorithms +ssh-rsa
    PubkeyAcceptedAlgorithms +ssh-rsa

The above should no longer be needed for standard member ssh access to
the services.  It is still useful for mgt0 for the time being as it is
still running the older OpenSSH release.  But mgt0 is not member
facing.  Only Savannah Hackers, sysadmin, and backup, accesses it.

I still recommend upgrading ssh keys to ed25519 which offers better
security with faster performance using a more compact key.  That
avoids these problems and I think will eventually be required.

Bob

Reply via email to