Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Address "ssh-rsa" deprecation in OpenSSH #348

Closed
stevenjohnstone opened this issue Dec 29, 2021 · 2 comments
Closed

Address "ssh-rsa" deprecation in OpenSSH #348

stevenjohnstone opened this issue Dec 29, 2021 · 2 comments

Comments

@stevenjohnstone
Copy link

Ran into this in #347.

OpenSSH plans to deprecate "ssh-rsa". Some distros are already moving in this direction. In particular, when STIGs are applied in RHEL, "ssh-rsa" is not allowed. Trouble is that golang.org/x/crypto SSH doesn't negotiate

There's work on going for this upstream e.g. https://go-review.googlesource.com/c/crypto/+/360195. With the latest (golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3), negotiating ssh with "ssh-rsa" deprecated does not work with RSA keys.

@kke
Copy link
Collaborator

kke commented Mar 7, 2022

Still waiting for golang/crypto#197

@james-nesbitt
Copy link
Collaborator

no longer relevant. launchpad doesn't manage keys, and it can handle ed-25519 now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants