2 ms·
As an aside, if you're using ssh-rsa the latest openssh server removed the RSA encryption module for pubkey verification, by default. You can add it back into
by genewitch 5y ago
As an aside, if you're using ssh-rsa the latest openssh server removed the RSA encryption module for pubkey verification, by default.
You can add it back into the sshd_config in /etc.
- mortehu 5y agoIt should be added that this is because ssh-rsa uses SHA1, which is broken, and not because there's a problem with RSA itself.
- doublepg23 5y agoMy main key was a ed25519 one for a while (looks like 2016-2018) but after running into so many edge cases I just went back to a rsa 4096. Is it in a better place now?
- thwarted 5y agossh's support for RSA has nothing to do with RSA tokens, which is the common name for RSA's SecurID hardware 2FA generators.