2 ms·

That's a bit of a stretch (pun intended). The release page clearly says "Security updates have been discontinued as of July 6th, 2020" and that updates are only

That's a bit of a stretch (pun intended). The release page clearly says "Security updates have been discontinued as of July 6th, 2020" and that updates are only available through long time support. That said, according to packages.debian.org it ships with OpenSSH 7.4 and support for sha2 have been included since 7.2. And ed25519 has been included since 6.5, so you should be fine.

sofixa 5y ago
> That's a bit of a stretch (pun intended). The release page clearly says "Security updates have been discontinued as of July 6th, 2020" and that updates are only available through long time support. Yeah, but LTS is still support :P > That said, according to packages.debian.org it ships with OpenSSH 7.4 and support for sha2 have been included since 7.2. And ed25519 has been included since 6.5, so you should be fine. You'd think that, but Debian do their own thing. I don't recall the exact versions, but the Include directive for sshd_config should be present in the version shipped in Debian 9, but isn't[0]. I can't find the exact listing, but for instance you can see that `ssh-keygen` in Debian 9, of version 7.4, doesn't support rsa-sha2[1]; it does support `ed25519` however. 0 - https://manpages.debian.org/stretch/openssh-server/sshd_config.5.en.html https://manpages.debian.org/stretch/openssh-server/sshd_conf... 1 - https://manpages.debian.org/stretch/openssh-client/ssh-keygen.1.en.html https://manpages.debian.org/stretch/openssh-client/ssh-keyge...