openssh bugs - Sep 2020 - [Bug 3208] New: ssh-keygen man page: sha1 fingerprint with "-E sha1" is supported

https://bugzilla.mindrot.org/show_bug.cgi?id=3208

            Bug ID: 3208
           Summary: ssh-keygen man page: sha1 fingerprint with "-E
sha1"
                    is supported
           Product: Portable OpenSSH
           Version: 8.3p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: minor
          Priority: P5
         Component: ssh-keygen
          Assignee: unassigned-bugs at mindrot.org
          Reporter: vincent-openssh at vinc17.net

The ssh-keygen(1) man page says:

  -E fingerprint_hash
      Specifies the hash algorithm used when displaying key
fingerprints.
      Valid options are: ?md5? and ?sha256?. The default is ?sha256?.

But sha1 is supported too.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3208

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WONTFIX
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Yes, for legacy reasons. We don't want to encourage its use though, so
it will remain undocumented.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3208

Vincent Lefevre <vincent-openssh at vinc17.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |vincent-openssh at vinc17.net

--- Comment #2 from Vincent Lefevre <vincent-openssh at vinc17.net> ---
OK, but the choice not to document it is rather strange as SHA1 is the
default fingerprint digest in OpenSSL. So it is still useful in
practice.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.