Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecated sshd configurations when upgrading to ubuntu 20.04 #250

Open
cegerhardson opened this issue Jul 12, 2022 · 1 comment
Open

Deprecated sshd configurations when upgrading to ubuntu 20.04 #250

cegerhardson opened this issue Jul 12, 2022 · 1 comment

Comments

@cegerhardson
Copy link
Contributor

While working on upgrading our salt configurations for ubuntu 20.04, I noticed these outputs in the logs from sshd:

Jul 12 12:58:40 salt-master.vagrant.psf.io sshd[1220613]: rexec line 65: Deprecated option UseLogin
Jul 12 12:58:40 salt-master.vagrant.psf.io sshd[1220613]: rexec line 66: Deprecated option UsePrivilegeSeparation
Jul 12 12:58:40 salt-master.vagrant.psf.io sshd[1220613]: rexec line 80: Deprecated option RhostsRSAAuthentication
Jul 12 12:58:40 salt-master.vagrant.psf.io sshd[1220613]: Connection from 172.17.0.1 port 60496 on 172.17.0.2 port 22 rdomain ""
Jul 12 12:58:40 salt-master.vagrant.psf.io sshd[1220613]: reprocess config line 80: Deprecated option RhostsRSAAuthentication

I'm not sure what the best approach is, opening this issue to decide how to address this in our configuration.

@cegerhardson
Copy link
Contributor Author

cegerhardson commented Jan 23, 2023

It seems that with the upgrade of Ubuntu 20.04, openssh is now operating as version 8.2. This release "removes the "ssh-rsa" (RSA/SHA1) algorithm," as noted here, explaining our deprecated configurations.

A possible avenue to consider addressing this in our configuration is to manually enable UpdateHostKeys, as pointed out here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant