Package: openssh-server Version: 1:10.4p1-2 Severity: wishlist Dear Maintainer,
OpenSSH upstream added a new hybrid hostkey type ssh_host_mldsa44_ed25519_key.pub. It is enabled by default, and can be created with ssh-keygen -A. The openssh-server postinst script however doesn't use ssh-keygen -A and instead only generates hostkeys of known types and the ones that are configured in the sshd config. It appears that it currently doesn't know about mldsa44_ed25519 host key type, please add support for this new host key type. ``` Setting up openssh-server (1:10.4p1-2) ... Creating config file /etc/ssh/sshd_config with new version Creating SSH2 RSA key; this may take some time ... 3072 SHA256:YnsFWosh7fXafsy54N5Ly8Xhcs2cyN3G7QSqNbOru2o root@7b108694ebc2 (RSA) Creating SSH2 ECDSA key; this may take some time ... 256 SHA256:Bd/QtLaV17Kb00huRz1wOeDnSgxQDe3XvffKshbAgWg root@7b108694ebc2 (ECDSA) Creating SSH2 ED25519 key; this may take some time ... 256 SHA256:Nsx0T7zLEBNiYkELwLbX44pkYqG0DMEBalJ+bNB23ss root@7b108694ebc2 (ED25519) ... # ssh-keygen -A ssh-keygen: generating new host keys: MLDSA44-ED25519 ... # ls -latr *.pub -rw-r--r-- 1 root root 571 Jul 28 10:52 ssh_host_rsa_key.pub -rw-r--r-- 1 root root 179 Jul 28 10:52 ssh_host_ecdsa_key.pub -rw-r--r-- 1 root root 99 Jul 28 10:52 ssh_host_ed25519_key.pub -rw-r--r-- 1 root root 1895 Jul 28 10:53 ssh_host_mldsa44_ed25519_key.pub ``` Likely postinst needs to learn about mldsa44_ed25519 type/filename. -- System Information: Debian Release: forky/sid APT prefers questing-updates APT policy: (500, 'questing-updates'), (500, 'questing-security'), (500, 'questing'), (100, 'questing-backports') Architecture: amd64 (x86_64) Kernel: Linux 7.1.3-zabbly+ (SMP w/12 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages openssh-server depends on: ii debconf [debconf-2.0] 1.5.91 ii init-system-helpers 1.68 ii libaudit1 1:4.0.5-1build1 ii libc6 2.42-0ubuntu3.1 ii libcom-err2 1.47.2-3ubuntu2 ii libcrypt1 1:4.4.38-1build1 ii libgssapi-krb5-2 1.21.3-5ubuntu2 ii libkrb5-3 1.21.3-5ubuntu2 ii libpam-modules 1.7.0-5ubuntu2 ii libpam-runtime 1.7.0-5ubuntu2 ii libpam0g 1.7.0-5ubuntu2 ii libselinux1 3.8.1-1build1 ii libssl3t64 3.5.3-1ubuntu3.4 ii libwrap0 7.6.q-36build1 ii openssh-client 1:10.0p1-5ubuntu5.4 ii openssh-sftp-server 1:10.0p1-5ubuntu5.4 ii procps 2:4.0.4-8ubuntu3 ii systemd [systemd-sysusers] 257.9-0ubuntu2.5 ii sysvinit-utils [lsb-base] 3.14-4ubuntu1 ii ucf 3.0052 ii zlib1g 1:1.3.dfsg+really1.3.1-1ubuntu2 Versions of packages openssh-server recommends: ii libpam-systemd [logind] 257.9-0ubuntu2.5 ii ncurses-term 6.5+20250216-2ubuntu0.1 ii ssh-import-id 5.11-0ubuntu3 ii xauth 1:1.1.2-1.1 Versions of packages openssh-server suggests: pn molly-guard <none> pn monkeysphere <none> pn ssh-askpass <none> ii ufw 0.36.2-9 -- debconf information excluded
