"ssh -Q key" does not list rsa-sha2 algorithms

Christian Weisgerber naddy at mips.inka.de
Tue Jun 2 06:04:43 AEST 2020


On 2020-06-01, Ethan Rahn <ethan.rahn at gmail.com> wrote:

> With the upcoming deprecation of ssh-rsa I was trying to see what keys my
> version of OpenSSH ( 7.8p1 ) supports. I noticed that "ssh -Q key" does not
> actually list the suggested algorithms to transition to ( rsa-sha2-256 and
> rsa-sha2-512 ) even though they are supported.

"-Q key" are the supported key formats.  For the signature algorithms,
you want "-Q sig".  This is documented in the man page.

-- 
Christian "naddy" Weisgerber                          naddy at mips.inka.de


More information about the openssh-unix-dev mailing list