Public bug reported:
After upgrading Ubuntu to 26.10, it installed openssh-server-gssapi and
openssh-client-gssapi; but I have no need for those enterprise features,
so I uninstalled those, and installed the plain openssh-server and
openssh-client. Neither now works:
> sudo sshd -t
/etc/ssh/sshd_config.d/99-opensshserver-crypto-policies.conf: line 3: Bad
configuration option: GSSAPIKexAlgorithms
/etc/ssh/sshd_config.d/99-opensshserver-crypto-policies.conf: terminating, 1
bad configuration options
> > ssh xyz
/etc/ssh/ssh_config.d/99-openssh-crypto-policies.conf: line 3: Bad
configuration option: gssapikexalgorithms
/etc/ssh/ssh_config.d/99-openssh-crypto-policies.conf: terminating, 1 bad
configuration options
The problem is that:
grep -i gssapi /etc/crypto-policies/back-ends/openssh*.config
/etc/crypto-policies/back-ends/openssh.config:GSSAPIKexAlgorithms
gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-
/etc/crypto-policies/back-ends/opensshserver.config:GSSAPIKexAlgorithms
gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-
Uninstalling openssh-server-gssapi with purge also nuked my host keys - be very
careful.
ProblemType: Bug
DistroRelease: Ubuntu 26.10
Package: crypto-policies 20251128.git19878fe-0ubuntu5
ProcVersionSignature: Ubuntu 7.3.0-8.8-generic 7.3.0-rc5
Uname: Linux 7.3.0-8-generic x86_64
ApportVersion: 2.36.0-0ubuntu1
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Sun Oct 4 14:28:00 2026
InstallationDate: Installed on 2026-01-24 (253 days ago)
InstallationMedia: Ubuntu-Server 25.10 "Questing Quokka" - Release amd64
(20251007.1)
PackageArchitecture: all
SourcePackage: crypto-policies
UpgradeStatus: Upgraded to stonking on 2026-10-04 (0 days ago)
** Affects: crypto-policies (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug stonking third-party-packages wayland-session
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2169462
Title:
openssh-server fails to start: Bad configuration option:
GSSAPIKexAlgorithms
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/crypto-policies/+bug/2169462/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
