OpenBSD Journal

DSA signature support removed from OpenSSH

Contributed by rueda on from the it's all dead at the D-S-A dept.

Damien Miller (djm@) has completed the planned [See previous articles] removal of DSA signature support from OpenSSH:

CVSROOT:	/cvs
Module name:	src
Changes by:	djm@cvs.openbsd.org	2025/05/05 23:40:56

Modified files:
	usr.bin/ssh    : sshkey.h sshkey.c sshd.c sshd-session.c 
	                 sshd-auth.c sshconnect.c ssh_config ssh.c 
	                 ssh-keysign.c ssh-keyscan.c ssh-keygen.c 
	                 ssh-add.c readconf.c pathnames.h hostfile.c 
	                 dns.c authfile.c authfd.c PROTOCOL 
Removed files:
	usr.bin/ssh    : ssh-dss.c 

Log message:
finally remove DSA signature support from OpenSSH.

feedback/ok tb@, ok deraadt@

The editors would like to encourage our readers to arrange a proper wake for this one.
Please keep going until we can be quadruply sure it's all gone.


Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]