CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2019/05/19 18:20:36
Modified files:
usr.bin/ssh : ssh-keygen.1 sshkey.c
Log message:
When signing certificates with an RSA key, default to using the
rsa-sha2-512 signature algorithm. Certificates signed by RSA keys
will therefore be incompatible with OpenSSH < 7.2 unless the default
is overridden.
Document the ability of the ssh-keygen -t flag to override the
signature algorithm when signing certificates, and the new default.
ok deraadt@