Re: id_dsa - not in PubkeyAcceptedKeyTypes

From	Pierre Frenkiel <pierre.frenkiel@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: id_dsa - not in PubkeyAcceptedKeyTypes
Date	2019-07-17 13:20 +0200
Message-ID	<ykQ8x-4B0-3@gated-at.bofh.it> (permalink)
References	<ykPcu-41q-7@gated-at.bofh.it> <ykPYR-4xE-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, 17 Jul 2019, Stephan Seitz wrote:

> According to the buster manpage of sshd_config:
>
> PubkeyAcceptedKeyTypes
>      Specifies the key types that will be accepted for public key 
> authentication as a list of comma-separated patterns. Alternately       if the 
> specified value begins with a + character, then the       specified key 
> types will be appended to the default set instead of       replacing them. If 
> the specified value begins with a -       character, then the specified key 
> types (including wildcards) will       be removed from the default set instead 
> of re
>      placing them. The default for this option is:
>
> 	  ecdsa-sha2-nistp256-cert-v01@openssh.com,
> 	  ecdsa-sha2-nistp384-cert-v01@openssh.com,
> 	  ecdsa-sha2-nistp521-cert-v01@openssh.com,
> 	  ssh-ed25519-cert-v01@openssh.com,
> 	  rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,
> 	  ssh-rsa-cert-v01@openssh.com,
> 	  ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,
> 	  ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
>

   thanks, but I've still 2 questions:

   1/ why something which worked yesterday doesn't work today?
   2/ what would be the recommended key in this long list?

best regards,
-- 
Pierre Frenkiel

Thread

id_dsa - not in PubkeyAcceptedKeyTypes Pierre Frenkiel <pierre.frenkiel@gmail.com> - 2019-07-17 12:20 +0200
  Re: id_dsa - not in PubkeyAcceptedKeyTypes <tomas@tuxteam.de> - 2019-07-17 12:30 +0200
    Re: id_dsa - not in PubkeyAcceptedKeyTypes Pierre Frenkiel <pierre.frenkiel@gmail.com> - 2019-07-17 12:50 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes <tomas@tuxteam.de> - 2019-07-17 13:10 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes Michael Kesper <mkesper@schokokeks.org> - 2019-07-17 13:10 +0200
  Re: id_dsa - not in PubkeyAcceptedKeyTypes Brad Rogers <brad@fineby.me.uk> - 2019-07-17 12:30 +0200
  Re: id_dsa - not in PubkeyAcceptedKeyTypes Stephan Seitz <stse+debian@fsing.rootsland.net> - 2019-07-17 13:10 +0200
    Re: id_dsa - not in PubkeyAcceptedKeyTypes <tomas@tuxteam.de> - 2019-07-17 13:20 +0200
    Re: id_dsa - not in PubkeyAcceptedKeyTypes Pierre Frenkiel <pierre.frenkiel@gmail.com> - 2019-07-17 13:20 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes Stephan Seitz <stse+debian@fsing.rootsland.net> - 2019-07-17 13:30 +0200
        Re: id_dsa - not in PubkeyAcceptedKeyTypes Pierre Frenkiel <pierre.frenkiel@gmail.com> - 2019-07-17 14:30 +0200
          Re: id_dsa - not in PubkeyAcceptedKeyTypes Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-17 15:00 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes Brad Rogers <brad@fineby.me.uk> - 2019-07-17 13:30 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes Michael Kesper <mkesper@schokokeks.org> - 2019-07-17 14:30 +0200

csiph-web