ssh 7 and dsa keys (Was: _ssh: update to 7.0)

ssh 7 and dsa keys (Was: _ssh: update to 7.0)

[Mikael Magnusson]

On Sat, Aug 15, 2015 at 6:56 PM, Mikael Magnusson <mikachu@gmail.com> wrote:

> @@ -234,7 +244,7 @@ _ssh () {
>          (#i)hostname=*)
>            _wanted hosts expl 'real host name to log into' _ssh_hosts && ret=0
>            ;;
> -        (#i)(hostbasedkeytypes|hostkeyalgorithms)=*)
> +        (#i)(hostbasedkeytypes|hostkeyalgorithms|pubkeyacceptedkeytypes)=*)
>            _values -s , 'key types' \
>                'ecdsa-sha2-nistp256-cert-v01@openssh.com' \
>                'ecdsa-sha2-nistp384-cert-v01@openssh.com' \
> @@ -450,6 +460,7 @@ _ssh () {
>                  Protocol \
>                  ProxyCommand \
>                  ProxyUseFdpass \
> +                PubkeyAcceptedKeyTypes \
>                  PubkeyAuthentication \
>                  RekeyLimit \
>                  RemoteForward \

As an aside, if you get a password prompt when you're trying to push
to sf after updating to ssh 7.0, it's because the public key they have
is dsa, and ssh 7.0 disables using them by default. If you want to
ignore this and just keep on living your life, add this to your
~/.ssh/config

Host *.code.sf.net
PubkeyAcceptedKeyTypes +ssh-dss

-- 
Mikael Magnusson