Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The article states that host key authentication methods cannot be disabled. Instead of creating broken symlinks, you can actually specify this server-side in sshd_config (at least on CentOS 7):

  HostKey /etc/ssh/ssh_host_rsa_key
You can also force this on the client-side in ~/.ssh/config:

  HostKeyAlgorithms ssh-rsa
See man pages for defaults.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: