Re: Heads-up: DSA key support being removed from OpenSSH

Christian Weisgerber <[email protected]> Wed, 2 Apr 2025 02:39:27 +0200

Newsgroups	gmane.os.freebsd.security.general
Message-ID	<[email protected]>

Christian Weisgerber:

> If OpenSSH upstream stick to the published schedule, version 9.9
> that is now in 13-STABLE/14-STABLE/15-CURRENT will be the _final_
> release that even includes the DSA code.

Subject: Call for testing: OpenSSH 10.0
[...]
Potentially-incompatible changes
--------------------------------

 * This release removes support for the weak DSA signature
   algorithm, completing the deprecation process that began in
   2015 (when DSA was disabled by default) and repeatedly warned
   over the the last 12 months.
[...]

https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041855.html

-- 
Christian "naddy" Weisgerber                          [email protected]