[X2Go-Dev] Bug#1003: x2goclient sshd (for folder sharing) weak host key

[Florian Wicke - Hetzner Online GmbH]

Package: x2goclient

The sshd (sshd.exe) spawned by x2goclient for things like the folder
sharing is creating a DSA HostKey.

Even if this sshd is only listening on localhost and is accessed through
the ssh tunnel from the X2Go server this might lead to connections
errors if the ssh_config of the server is configured to not allow
connections to these weak (1024 bit) DSA HostKeys.

I would advice increasing this to at least 2048 bit RSA host keys or
even elliptic curve host keys if available.



Best regards,

 Florian Wicke

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Tel: +49 9831 505-187
Fax: +49 9831 505-387
florian.wicke at hetzner.de
www.hetzner.de

Registergericht Ansbach, HRB 6089
Geschäftsführer: Martin Hetzner

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20160225/e5ed1b8d/attachment.pgp>