openssh unix dev - Jan 2011 - Generate SSH1 host key by default?

Hi,

the OpenSSH installation script for Cygwin still creates a SSH1 host key
by default.

My question is, wouldn't it make more sense to drop all auto-generation
of SSH1 keys from the default installation procedure?  I mean, nobody
should use SSH1 anymore, right?  Or should the script stick to it for
some reason?


Corinna

-- 
Corinna Vinschen
Cygwin Project Co-Leader
Red Hat

On 31/01/2011 9:54 PM, Corinna Vinschen wrote:
> the OpenSSH installation script for Cygwin still creates a SSH1 host key
> by default.
>
> My question is, wouldn't it make more sense to drop all auto-generation
> of SSH1 keys from the default installation procedure?  I mean, nobody
> should use SSH1 anymore, right?  Or should the script stick to it for
> some reason?
Although the server now defaults to not enabling SSH1 for new installs 
(and has for a couple of releases) the client could conceivably need an 
SSH1 key, eg for RhostsRSAAuthentication.  The admin could also enable 
Protocol 1 in the server (although it might be reasonable to give them 
the responsibility of creating the key in that case).

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.