I may have missed some emails in this thread, but did you
try this suggestion:

   But have you tried it in this order ?

   HostKey /usr/local/etc/ssh/ssh_host_key
   HostKey /usr/local/etc/ssh/ssh_host_dsa_key
   HostKey /usr/local/etc/ssh/ssh_host_rsa_key
   HostKey /usr/local/etc/ssh/ssh_host_ecdsa_key

Which is to say, have your sshd_config file list multiple
hostkey's, and then restart sshd after making that change?
I tried a similar change and it seemed to have some effect
on what clients saw when connecting, but I can't tell if
it has the effect that you want.

                -- garance



On 5/21/12 12:18 PM, Jason Usher wrote:
Folks,

Is there a better list for this - perhaps freebsd-security ?

I originally posted to -hackers because it *appears* that reverting "rsa, then dsa" to 
"dsa, then rsa" was a simple change to myproposal.h, but since that doesn't work, and 
since I haven't gotten any replies here ...

Thoughts ?
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscr...@freebsd.org"

Reply via email to