upstream: remove ssh-rsa (SHA1) from the list of allowed CA

signature algorithms ok markus OpenBSD-Commit-ID: da3481fca8c81e6951f319a86b7be67502237f57
dmikushin · Jan 25, 2020 · c3368a5 · c3368a5
1 parent 4a41d24
commit c3368a5
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/myproposal.h b/myproposal.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: myproposal.h,v 1.66 2020/01/23 02:46:49 dtucker Exp $ */
+/* $OpenBSD: myproposal.h,v 1.67 2020/01/24 00:28:57 djm Exp $ */
 
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
@@ -87,8 +87,7 @@
 	"ssh-ed25519," \
 	"[email protected]," \
 	"rsa-sha2-512," \
-	"rsa-sha2-256," \
-	"ssh-rsa"
+	"rsa-sha2-256"
 
 #define	KEX_DEFAULT_COMP	"none,[email protected]"
 #define	KEX_DEFAULT_LANG	""