Skip to content

Commit 5e0fbca

Browse files
rockdrillaaparcar
authored andcommitted
dropbear: disable RSA-SHA1 by default
Upstream has disabled SHA-1 algorithms by default since version 2025.87. SHA-1 has known weakness and most SSH implementations support alternatives. Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
1 parent 3dc0521 commit 5e0fbca

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

package/network/services/dropbear/Config.in

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -822,7 +822,6 @@ menu "Encryption options"
822822

823823
config DROPBEAR_RSA_SHA1
824824
bool "RSA-SHA1 [WEAK]"
825-
default y
826825
depends on DROPBEAR_LEGACY_COMPAT
827826
help
828827
This enables the following public key algorithm:

0 commit comments

Comments
 (0)