Your message dated Tue, 28 Jul 2026 13:57:15 +0100
with message-id <[email protected]>
and subject line Re: Bug#1135120: openssh-server: generates ecdsa and ed25519
keys on security upgrade
has caused the Debian Bug report #1135120,
regarding openssh-server: generates ecdsa and ed25519 keys on security upgrade
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1135120: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1135120
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: openssh-server
Version: 1:8.4p1-5+deb11u6
Severity: normal
X-Debbugs-Cc: [email protected], [email protected]
There recently was an OpenSSH upgrade, which led to it
generating ecdsa and ed25519 keys I had deliberately
removed because I use only RSA keys.
-- System Information:
Debian Release: 11.11
APT prefers oldoldstable-updates
APT policy: (500, 'oldoldstable-updates'), (500, 'oldoldstable-security'),
(500, 'oldoldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.10.0-39-amd64 (SMP w/1 CPU thread)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)
Versions of packages openssh-server depends on:
ii adduser 3.118+deb11u1
ii debconf [debconf-2.0] 1.5.77
ii dpkg 1.20.13
ii libaudit1 1:3.0-2
ii libc6 2.31-13+deb11u13
ii libcom-err2 1.46.2-2+deb11u1
ii libcrypt1 1:4.4.18-4
ii libgssapi-krb5-2 1.18.3-6+deb11u7
ii libkrb5-3 1.18.3-6+deb11u7
ii libpam-modules 1.4.0-9+deb11u2
ii libpam-runtime 1.4.0-9+deb11u2
ii libpam0g 1.4.0-9+deb11u2
ii libselinux1 3.1-3
ii libssl1.1 1.1.1w-0+deb11u5
ii libsystemd0 247.3-7+deb11u8
ii libwrap0 7.6.q-31
ii lsb-base 11.1.0
ii openssh-client 1:8.4p1-5+deb11u6
ii openssh-sftp-server 1:8.4p1-5+deb11u6
ii procps 2:3.3.17-5
ii runit-helper 2.10.3
ii ucf 3.0043+deb11u2
ii zlib1g 1:1.2.11.dfsg-2+deb11u2
Versions of packages openssh-server recommends:
ii logind-considered-harmful [logind] 89
pn ncurses-term <none>
pn xauth <none>
Versions of packages openssh-server suggests:
ii molly-guard 0.7.2
pn monkeysphere <none>
pn ssh-askpass <none>
pn ufw <none>
-- debconf information:
openssh-server/password-authentication: true
openssh-server/permit-root-login: true
--- End Message ---
--- Begin Message ---
On Mon, Apr 27, 2026 at 10:11:01PM +0000, Thorsten Glaser wrote:
Package: openssh-server
Version: 1:8.4p1-5+deb11u6
Severity: normal
X-Debbugs-Cc: [email protected], [email protected]
There recently was an OpenSSH upgrade, which led to it
generating ecdsa and ed25519 keys I had deliberately
removed because I use only RSA keys.
Nothing's changed here for a long time. You can avoid this by
explicitly setting HostKey in /etc/ssh/sshd_config or
/etc/ssh/sshd_config/*.conf to only the host keys you want;
openssh-server.postinst will respect that.
Thanks,
--
Colin Watson (he/him) [[email protected]]
--- End Message ---
