No HostKeys defined so blacklisting *dsa* doesn't really work

[sudeephb]

Hi,

On a few host, we're seeing this:

| $ grep HostKey /etc/ssh/sshd_config
| #HostKey /etc/ssh/ssh_host_rsa_key
| #HostKey /etc/ssh/ssh_host_ecdsa_key
| #HostKey /etc/ssh/ssh_host_ed25519_key
| $_

This makes blacklisting dsa keys useless as none are defined so it uses the default, which is all of them. I think the charm should check that either or both ssh_host_rsa_key and ssh_host_ed25519_key exists and then uncomment those HostKey lines if so.

---

Imported from Launchpad using lp2gh.

• date created: 2021-08-25T23:49:32Z

• owner: hloeung

• assignee: None

• the launchpad url