[Thinlinc-technical] DSA public keys and host keys with ThinLinc 4.5.0

Pierre Ossman ossman at cendio.se
Wed Dec 9 17:00:04 CET 2015


A heads up to all of you before you upgrade your clients to 4.5.0.
OpenSSH is upgraded in this version of ThinLinc and as part of that the
DSA algorithm got deprecated. It has some issues that can cause
security problems so it should not be used.

In principle it affects both servers and clients, but your servers will
also have RSA keys unless you've done something special.

Users that are still using DSA keys for authentication should start
using something more modern and safer, so please encourage your users
to re-generate their keys.

We didn't notice this until after release, so unfortunately this didn't
make it in to the release notes.

Rgds
-- 
Pierre Ossman           Software Development
Cendio AB		https://cendio.com
Teknikringen 8		https://twitter.com/ThinLinc
583 30 Linköping	https://facebook.com/ThinLinc
Phone: +46-13-214600	https://plus.google.com/+CendioThinLinc

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?



More information about the Thinlinc-technical mailing list