OpenSSH: which public keys are required/recommended?

From: Timo Felbinger (Timo.Felbinger@quantum.physik.uni-potsdam.de)
Date: 03/27/02 

From: Timo Felbinger <Timo.Felbinger@quantum.physik.uni-potsdam.de>
Date: Wed, 27 Mar 2002 10:41:55 +0100

Hello,

OpenSSH (in my case, version 3.1) supports three different types
of private/public key pairs: rsa1 (protocol 1), rsa and dsa
(protocol 2). I noticed that:
1) sshd refuses to start if no rsa1 host key is found, even if
   I don't need protocol 1, and have disabled it explicitely in
   sshd_config. Why?
2) protocol 2 seems to be supported if either one of the the
   corresponding key pairs, rsa or dsa, is present. Is there
   any advantage in having both? If not, is there a reason to
   prefer one over the other?

Thanks in advance,

Timo Felbinger 

-- 
Timo Felbinger           <Timo.Felbinger@quantum.physik.uni-potsdam.de>
Quantum Physics Group    http://www.quantum.physik.uni-potsdam.de
Institut fuer Physik     Tel: +49 331 977 1793      Fax: -1767
Universitaet Potsdam, Germany

Relevant Pages

  • Re: OpenSSH: which public keys are required/recommended?
    ... Just removing the Protocol entry obviously wasn't enough. ... >> corresponding key pairs, rsa or dsa, is present. ...
    (comp.security.ssh)
  • Re: ssh host key inconsistency
    ... but our sshd is only using the DSA key. ... we intentionally do not use the RSA host key by default. ... for protocol version 2. ... These three files contain the private parts of the host keys. ...
    (FreeBSD-Security)
  • Re: Which authenttication is better
    ... is using RSA keys in protocol 2, ... >PreferredAuthentications in the config file or on the command line. ... >>I was presented with the server host's RSA ...
    (comp.security.ssh)
  • Re: openssh uses Diffie-Hellman or RSA for sesssion key exchange?
    ... The answer "ssh2 uses Diffie-Hellman because ... that is what protocol demands" is certainly a right answer. ... RSA key transferring would make one party responsible for generating ... > methods -- what is used depends on what methods the client and server have ...
    (comp.security.ssh)
  • Re: OpenSSH 3.7.1 Newbie
    ... >created keys for RSA, RSA1 and DSA. ... The first number after the "SSH" text is the versions of the protocol ... Good judgement comes with experience. ...
    (comp.security.ssh)