Revert "ssh: deprecate use of old DSA keys"

This reverts commit 65b73d71cbe5df15ce62024123eedea284d825db.
2017-10-14 14:42:34 +08:00 · 2017-10-14 14:42:34 +08:00 · 07bc859e9a
commit 07bc859e9a
parent bdbba026f3
1 changed files with 5 additions and 2 deletions
--- a/nixos/modules/services/networking/ssh/sshd.nix
+++ b/nixos/modules/services/networking/ssh/sshd.nix
@ -363,9 +363,12 @@ in
          HostKey ${k.path}
        '')}

+        # Allow DSA client keys for now. (These were deprecated
+        # in OpenSSH 7.0.)
+        PubkeyAcceptedKeyTypes +ssh-dss
+
+        # Re-enable DSA host keys for now.
        ${optionalString supportOldHostKeys ''
-          # Allow DSA keys for now. (deprecated in OpenSSH 7.0)
-          PubkeyAcceptedKeyTypes +ssh-dss
          HostKeyAlgorithms +ssh-dss
        ''}
      '';