With the 7.0 release, OpenSSH disabled ssh-dss keys. The not-so-recommended workaround is to explicitly re-add DSA key support to .ssh/config
, which will eventually be dropped by a later OpenSSH version:
PubkeyAcceptedKeyTypes=+ssh-dss
As I have deployed my DSA key to countless machines (and I do not have a full list of them, as known_hosts
is hashed), I have to replace the old public user key whenever I encounter it on login.
Is it possible to make the OpenSSH client display a warning when I log in with an ssh-dss key?