diff options
| author | Christian Breunig <christian@breunig.cc> | 2025-09-17 21:16:49 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2025-09-17 21:16:49 +0200 |
| commit | 6af9055be9870effefe802c9fd7b3a9d6aec9413 (patch) | |
| tree | db3e7a702ed133edf19f7e60e5cfa0c2d956245a /python | |
| parent | 4669748ca1b39dc0cb54496d5ce695d05c8431f7 (diff) | |
| download | vyos-1x-6af9055be9870effefe802c9fd7b3a9d6aec9413.tar.gz vyos-1x-6af9055be9870effefe802c9fd7b3a9d6aec9413.zip | |
login: T7839: add deprecation warning for DSS public-key usage
OpenSSH in Debian Trixie has removed support for ssh-dss (DSA) keys, which will
prevent users with such keys from logging in after upgrade. To avoid lockouts,
add a loud deprecation warning when users log in using a DSA key. This warning
advises affected users to replace their keys with a supported algorithm (e.g.,
ed25519 or RSA) before the upgrade.
Deprecation warning will be displayed during "commit" but also as MOTD to inform
on this issue during every login.
DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will
be removed in VyOS 1.6. Please update affected keys to a supported
algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication
failures after the upgrade. The following users are using SSH-DSS keys
for authentication.
User "vyos" with deprecated public-key named: foo
Diffstat (limited to 'python')
0 files changed, 0 insertions, 0 deletions
