security/openssh-portable line # 82 of rc.d/openssh generates DSA not ECDSA

[J. Hellenthal]

As stated in the subject

if [ -f /usr/local/etc/ssh/ssh_host_ecdsa_key ]; then
        echo "You already have a Elliptic Curve DSA host key" \
                "in /usr/local/etc/ssh/ssh_host_ecdsa_key"
        echo "Skipping protocol version 2 Elliptic Curve DSA Key Generation"
else
        /usr/local/bin/ssh-keygen -t dsa \
                -f /usr/local/etc/ssh/ssh_host_ecdsa_key -N ''
fi


Specifically "/usr/local/bin/ssh-keygen -t dsa" needs to be changed to
"-t ecdsa" to be correct. Otherwise we are just reimplementing a DSA key
in a different file.

-- 

 - (2^(N-1))

pgpaSaWWSuR7X.pgp
Description: PGP signature