URL:
https://github.com/freeipa/freeipa/pull/3887
Author: tiran
Title: #3887: Use default ssh host key algorithms
Action: opened
PR body:
"""
ipa-client-install no longer overrides SSH client settings for
HostKeyAlgorithms. It's no longer necessary to configure
HostKeyAlgorithms. The setting was disabling modern algorithms and
enabled a weak algorithm that is blocked in FIPS code.
The ipa-client package removes IPA's custom HostKeyAlgorithm from
/etc/ssh/ssh_config during package update. Non-IPA settings are not
touched.
Fixes:
https://bugzilla.redhat.com/show_bug.cgi?id=1756432
Fixes:
https://pagure.io/freeipa/issue/8082
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3887/head:pr3887
git checkout pr3887