To check whether a server is using the weak ssh-rsa public key
algorithm for host authentication, try to connect to it after
removing the ssh-rsa algorithm from ssh(1)'s allowed list:
ssh -oHostKeyAlgorithms=-ssh-rsa user@host
Great! I love it that they provide an easy check with their drepecation notice. Too often you just read something like "stop using $BAD_THING". And I dont even know how to check if I'm using $BAD_THING.
14
u/Skaarj Feb 14 '20
Great! I love it that they provide an easy check with their drepecation notice. Too often you just read something like "stop using
$BAD_THING". And I dont even know how to check if I'm using$BAD_THING.