Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

In ssh_config I have the HostKeyAlgorithms parameter where I can enforce the use of DSS algorithm for the key, like:

HostKeyAlgorithms "ssh-dss"

How can I do this in sshd_config (daemon config) in order to enforce that all connections incoming should use the ssh-dss instead of ssh-rsa ?

share|improve this question
    
I'm curious - why would you want to require the use of DSA (instead of say RSA or other options)? –  Ram Jul 14 '12 at 23:11

1 Answer 1

up vote 1 down vote accepted

remove

HostKey /etc/ssh/ssh_host_rsa_key
from sshd_config.

I have to note that using 1024 bit keys with either RSA or DSA is no longer considered secure and standard DSA limits key size to 1024 bits (though OpenSSH can generate DSA keys up to 2048bits)

share|improve this answer
    
Great thanks man ! –  Aldebaran Aug 9 '11 at 20:15

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.