Removing DSS and other unreasonable algorithms (Was: Missing signed-off for pkg chacha20 patches)

[Jakub Jelen <jjelen@xxxxxxxxxx>]

On Thu, 2018-06-14 at 16:03 +0200, Andreas Schneider wrote:
> [...]
> 
> Looks like openssh removed support for ssh-dss. At least my openssh
> 7.7 
> doesn't know about it at all.

The OpenSSH 7.7p1 still has the support for ssh-dss keys, but they are
disabled by default for any use, unless you enable them using
PubkeyAcceptedKeyTypes and friend configuration options. The reason why
it is still there is probably because the DSA keys are mandatory part
(REQUIRED) of RFC4253 (Section 6.6).

> I would remove it from libssh after the release of 0.8 together with
> SSHv1 
> support.
> 
> I think we can remove it from pkd already? Comments?

Removing the ancient SSHv1, blowfish and other unreasonable algorithms
makes sense for me.

Regards,
-- 
Jakub Jelen
Software Engineer
Security Technologies
Red Hat, Inc.