Change Details

openssh 7.0 has dropped default support for ssh-dss (DSA) keys. Debian Stretch ships with openssh 7.4. This is seen as a security improvement upstream and by the Wikimedia operations team. [x] Announce deprecation of ssh-dss keys ** https://lists.wikimedia.org/pipermail/cloud-announce/2019-March/000139.html [] Remove ability to upload new ssh-dss keys via #mediawiki-extensions-openstackmanager [] Remove ability to upload new ssh-dss keys via #striker [] Audit LDAP for users with existing ssh-dss keys and prompt them to upload new keys [] Remove support for ssh-dss keys in Trusty and Jessie openssh server configs

openssh 7.0 has dropped default support for ssh-dss (DSA) keys. Debian Stretch ships with openssh 7.4. This is seen as a security improvement upstream and by the Wikimedia operations team. [x] Announce deprecation of ssh-dss keys ** https://lists.wikimedia.org/pipermail/cloud-announce/2019-March/000139.html [] Remove ability to upload new ssh-dss keys via #mediawiki-extensions-openstackmanager [] Remove ability to upload new ssh-dss keys via #striker [] Audit LDAP for users with existing ssh-dss keys and prompt them to upload new keys [] Remove support for ssh-dss keys in Jessie openssh server configs

openssh 7.0 has dropped default support for ssh-dss (DSA) keys. Debian Stretch ships with openssh 7.4. This is seen as a security improvement upstream and by the Wikimedia operations team. [x] Announce deprecation of ssh-dss keys ** https://lists.wikimedia.org/pipermail/cloud-announce/2019-March/000139.html [] Remove ability to upload new ssh-dss keys via #mediawiki-extensions-openstackmanager [] Remove ability to upload new ssh-dss keys via #striker [] Audit LDAP for users with existing ssh-dss keys and prompt them to upload new keys [] Remove support for ssh-dss keys in Trusty and Jessie openssh server configs