The release notes describe how to test authentication without SHA-1 on a SSH server. In my case, it was more useful to check the algorithm of my SSH keys to che

The release notes describe how to test authentication without SHA-1 on a SSH server. In my case, it was more useful to check the algorithm of my SSH keys to check if they were to be obsolete: $ ssh-keygen -l -f MyKeyFile 2048 SHA256:39XX..XX x@y.com (RSA) $ for f in ~/.ssh/*.pub; do ssh-keygen -l -f $f; done All of my keys were using ED25519 or RSA-SHA256, so they will still be valid when RSA-SHA1 will be removed. Note that Debian Strech (oldstable, published in 2017) shipped openssh-client 7.4 which produced RSA SHA-256 keys by default.