Re: OpenSSH: which public keys are required/recommended?

From: Dimitri Maziuk (dima@127.0.0.1)
Date: 03/27/02 

From: Dimitri Maziuk <dima@127.0.0.1>
Date: Wed, 27 Mar 2002 20:09:03 +0000 (UTC)

begin 666 Timo Felbinger:
>
> Hello,
>
> OpenSSH (in my case, version 3.1) supports three different types
> of private/public key pairs: rsa1 (protocol 1), rsa and dsa
> (protocol 2). I noticed that:
> 1) sshd refuses to start if no rsa1 host key is found, even if
> I don't need protocol 1, and have disabled it explicitely in
> sshd_config. Why?
> 2) protocol 2 seems to be supported if either one of the the
> corresponding key pairs, rsa or dsa, is present. Is there
> any advantage in having both? If not, is there a reason to
> prefer one over the other?

What I noticed after upgrading to OpenSSH 3.1 is that if a host
has DSA key but no RSA key in authorized_keys2, ssh will barf.
So there is a reason to prefer RSA keys -- they seem to work better.
I'm not sure if it is a bug or a feature.

Dima 

-- 
Surely there is a polite way to say FOAD.                        -- Shmuel Metz
"Go forth and multiply".                                         -- Paul Martin

Relevant Pages