test: drop ssh-dss openssh_server config #1433
Conversation
The ssh-dss was deprecated [1] in the OpenSSH 9.8p1 Support for ssh-dss, ssh-dss-cert-* host and user keys is disabled by default at run-time. These may be re-enabled using the instructions at http://www.openssh.com/legacy.html [1] https://www.openssh.com/releasenotes.html Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
|
Sure, and this would fall over as soon as debian-testing upgrades to 9.8. Shall we disable it by default in libssh2 and stop testing it now? Would you want to update the PR to that effect? This was originally scheduled for September 2024, which is almost here, so doing it now probably doesn't make much difference. Also nobody ever commented on this schedule that I proposed, meaning either nobody cares, or everyone agrees, or nobody has seen it. The only issue I see is that announcement never made it into a release, for people to see it and prepare for it. |
|
This patch was mostly to fix one of the test we run on openembedded that start regressing with the update to OpenSSH 9.8p1 openembedded/openembedded-core@1a2fef1 I believe we ran just a little of tests available in libssh2 and it was done in cross-compilation environment. |
|
FWLIW, I didn't reply to the September 2024 schedule because it seemed fine to me. Dropping it earlier or later won't have any impact on the projects I work on. |
|
@quaresmajose I'd prefer to handle this in a single commit, to avoid a broken CI disrupting other PRs. |
|
An attempt to disable DSA by default: #1435 |
@vszakats thanks for the fix |
The ssh-dss was deprecated [1] in the OpenSSH 9.8p1
Support for ssh-dss, ssh-dss-cert-* host and user keys is disabled by default at run-time. These may be re-enabled using the instructions at https://www.openssh.com/legacy.html
[1] https://www.openssh.com/releasenotes.html