Zsh Mailing List Archive
Messages sorted by: Reverse Date, Date, Thread, Author

ssh 7 and dsa keys (Was: _ssh: update to 7.0)



On Sat, Aug 15, 2015 at 6:56 PM, Mikael Magnusson <mikachu@xxxxxxxxx> wrote:

> @@ -234,7 +244,7 @@ _ssh () {
>          (#i)hostname=*)
>            _wanted hosts expl 'real host name to log into' _ssh_hosts && ret=0
>            ;;
> -        (#i)(hostbasedkeytypes|hostkeyalgorithms)=*)
> +        (#i)(hostbasedkeytypes|hostkeyalgorithms|pubkeyacceptedkeytypes)=*)
>            _values -s , 'key types' \
>                'ecdsa-sha2-nistp256-cert-v01@xxxxxxxxxxx' \
>                'ecdsa-sha2-nistp384-cert-v01@xxxxxxxxxxx' \
> @@ -450,6 +460,7 @@ _ssh () {
>                  Protocol \
>                  ProxyCommand \
>                  ProxyUseFdpass \
> +                PubkeyAcceptedKeyTypes \
>                  PubkeyAuthentication \
>                  RekeyLimit \
>                  RemoteForward \

As an aside, if you get a password prompt when you're trying to push
to sf after updating to ssh 7.0, it's because the public key they have
is dsa, and ssh 7.0 disables using them by default. If you want to
ignore this and just keep on living your life, add this to your
~/.ssh/config

Host *.code.sf.net
PubkeyAcceptedKeyTypes +ssh-dss

-- 
Mikael Magnusson



Messages sorted by: Reverse Date, Date, Thread, Author