[MacPorts] #70319: openssh @9.8p1 broke some key types

MacPorts noreply at macports.org
Sun Jul 14 19:29:02 UTC 2024


#70319: openssh @9.8p1 broke some key types
------------------------+----------------------
  Reporter:  fhgwright  |      Owner:  artkiver
      Type:  defect     |     Status:  assigned
  Priority:  Normal     |  Milestone:
 Component:  ports      |    Version:  2.9.3
Resolution:             |   Keywords:
      Port:  openssh    |
------------------------+----------------------

Comment (by danielluke):

 Replying to [comment:18 drosehn]:
 > I'm afraid I'm another one who was blindsided by the change to `openssh`
 .

 "blindsided" by forgetting that you made a config change in 2015 where the
 instructions warned you that this day was coming but you didn't migrate to
 some other key type...

 > As near as I can tell, it is not possible to install the older version.

 https://trac.macports.org/wiki/howto/InstallingOlderPort

 > Am I just stuck?  I understand that everyone involved is trying to "Do
 the Right Thing", but it leaves me with many servers that I cannot access.
 I know there are ways I can get around this by bouncing through other
 servers of mine, but that's going to get pretty painful.

 Using jump servers is super-easy to do with ssh, and it's probably what
 I'd set up anyway if I had old hardware that I couldn't update (especially
 since that hardware should be as segmented from the 'regular' internet as
 possible anyway as it's woefully out of date and clearly isn't receiving
 security updates any longer).

 If you /can/ run newer openssh on your old machines, you should do so. If
 you install Openssh from 2016 (version 7.2) or newer instead of relying on
 openssh from 2015 or older, you can use RSA keys which are still
 supported.

-- 
Ticket URL: <https://trac.macports.org/ticket/70319#comment:21>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list