Add the ECDSA algorithms (remove any key sizes you do not wish to allow) to the list of
auth-publickey signature-algorithms
(within the
<authentication-methods>
element) in your
ssh-server-config.xml
:
<authentication-methods> <authentication> <auth-publickey require-dns-match="no" signature-algorithms="ecdsa-sha2-nistp256,ecdsa-sha2-nistp384, \ ecdsa-sha2-nistp521,ssh-dss,ssh-rsa,ssh-dss-sha256@ssh.com, \ ssh-rsa-sha256@ssh.com,x509v3-sign-dss,x509v3-sign-rsa, \ x509v3-sign-dss-sha256@ssh.com,x509v3-sign-rsa-sha256@ssh.com"/> <auth-password /> <auth-keyboard-interactive /> </authentication> </authentication-methods>
Note | |
---|---|
To enable ECDSA keys for X.509, add also the following to the
|
After you have made the changes, you must stop and start the server to take the new configuration into use:
# /etc/init.d/ssh-server-g3 stop # /etc/init.d/ssh-server-g3 start