Re: Heads-up: DSA key support being removed from OpenSSH
Ed Maste <[email protected]> Tue, 15 Apr 2025 14:41:09 -0400
| Newsgroups | gmane.os.freebsd.security.general |
|---|---|
| Message-ID | <CAPyFy2AezDiYDU+iAkvCUz9T-rrhCxYKxgpG2d8ADXw9AL3D8w@mail.gmail.com> |
On Thu, 10 Apr 2025 at 19:21, Dr Jim Allen <[email protected]> wrote: > > > Two things. > > a) Why remove the build config option? > I know the code is being removed at some point, but until it is, why not > leave it as a option (defaulted off)? There's no user-facing interface to run upstream's configure script as part of the FreeBSD build system, so enabling DSA in the FreeBSD base system already required having a patched tree. Committing this removal now has no user-facing impact, but means that we can separately decide what to merge to stable branches: in particular, it is possible for us to merge 10.0p2 to stable branches with DSA support still present.