openssh unix dev - Aug 2021 - Alternative check for depeciated ssh-rsa signature?

The recent release notes suggesting testing with
   ssh -oHostKeyAlgorithms=-ssh-rsa user at host

I want to test with dropbear clients where I do not have fine grained
control of algorithms.  I think, but want to confirm, that an
equivalent server side test is to run sshd with the sshd_config line
   HostKeyAlgorithms   -ssh-rsa,ssh-rsa-cert-v01 at openssh.com

Thanks!

M

On Tue, 31 Aug 2021, M Rubon wrote:
> The recent release notes suggesting testing with
>    ssh -oHostKeyAlgorithms=-ssh-rsa user at host
> 
> I want to test with dropbear clients where I do not have fine grained
> control of algorithms.  I think, but want to confirm, that an
> equivalent server side test is to run sshd with the sshd_config line
>    HostKeyAlgorithms   -ssh-rsa,ssh-rsa-cert-v01 at openssh.com
That's correct, though AFAIK Dropbear doesn't support certificates
anyway.

-d