2 ms·
Sure, just remove "ssh-rsa" from the "HostKeyAlgorithms" list in /etc/ssh/sshd_config. For example, you might instead use: HostKeyAlgorithms ssh-ed25519-cert
by jlgaddis 7y ago
Sure, just remove "ssh-rsa" from the "HostKeyAlgorithms" list in /etc/ssh/sshd_config. For example, you might instead use:
HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256
Myself, I've long set the (client-side) defaults on my workstations to
HostKeyAlgorithms ssh-ed25519,ssh-rsa
but it looks like it may be time to update that.