[openssh-commits] [openssh] branch master updated (95401eea -> 23447502)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  95401eea  Replace shell function with ssh-keygen -A.
       new  56c4455d  upstream: wrap at 80 columns
       new  23447502  upstream: After years of forewarning, disable the RSA/SHA-1

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 2344750250247111a6c3c6a4fe84ed583a61cc11
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sun Aug 29 23:53:10 2021 +0000

    upstream: After years of forewarning, disable the RSA/SHA-1
    
    signature algorithm by default. It is feasible to create colliding SHA1
    hashes, so we need to deprecate its use.
    
    RSA/SHA-256/512 remains available and will be transparently selected
    instead of RSA/SHA1 for most SSH servers released in the last five+
    years. There is no need to regenerate RSA keys.
    
    The use of RSA/SHA1 can be re-enabled by adding "ssh-rsa" to the
    PubkeyAcceptedAlgorithms directives on the client and server.
    
    ok dtucker deraadt
    
    OpenBSD-Commit-ID: 189bcc4789c7254e09e23734bdd5def8354ff1d5

commit 56c4455d3b54b7d481c77c82115c830b9c8ce328
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sun Aug 29 23:44:07 2021 +0000

    upstream: wrap at 80 columns
    
    OpenBSD-Commit-ID: 47ca2286d6b52a9747f34da16d742879e1a37bf0

Summary of changes:
 clientloop.c | 5 +++--
 myproposal.h | 6 ++----
 2 files changed, 5 insertions(+), 6 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.