The server hosting svn, hg, and bzr services has been updated and now
has a newer OpenSSH.  This should resolve the OpenSSH obsolescence of
SHA1.  Hopefully it will all work transparently for everyone.

If any of you had previously added the initial workaround below it
should be removed as it should no longer be needed.

    HostkeyAlgorithms +ssh-rsa
    PubkeyAcceptedAlgorithms +ssh-rsa

It shouldn't be needed because since OpenSSH 8.5 a new feature now
exists and defaults to "UpdateHostKeys yes" which will automatically
add newer host keys to the known_hosts file.  The theory goes that
moving forward now that host keys can and will be automatically
upgraded without the need for the above type of workaround.

Please report any problems.

Bob

Reference: https://savannah.nongnu.org/maintenance/SshAccess/

Attachment: signature.asc
Description: PGP signature

Reply via email to