[Bug 3494] New: ssh-keygen -r cannot disable SHA-1 digest

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Oct 31 22:32:39 AEDT 2022


https://bugzilla.mindrot.org/show_bug.cgi?id=3494

            Bug ID: 3494
           Summary: ssh-keygen -r cannot disable SHA-1 digest
           Product: Portable OpenSSH
           Version: 9.1p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh-keygen
          Assignee: unassigned-bugs at mindrot.org
          Reporter: pemensik at redhat.com

I would like to have a simple way to omit SHA1 digest from DNS SSHFP
records. But I don't want to use SHA1 digest anymore or propagate them
to secure DNS zones. Is there way to skip their printing?

If not, could such support be added?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list