[ptxdist] [PATCH] openssh: don't generate a RSA host key by default

[Roland Hieber <r.hieber@pengutronix.de>]

Generating RSA keys can take several minutes on embedded systems,
substantially slowing down the first startup. ED25519 is supported on
most recent SSH clients, so just drop the RSA host key in its favour.

Signed-off-by: Roland Hieber <r.hieber@pengutronix.de>
---
 projectroot/etc/rc.once.d/openssh | 1 -
 projectroot/etc/ssh/sshd_config   | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/projectroot/etc/rc.once.d/openssh b/projectroot/etc/rc.once.d/openssh
index a49ddee0a..4a3c594cc 100644
--- a/projectroot/etc/rc.once.d/openssh
+++ b/projectroot/etc/rc.once.d/openssh
@@ -14,7 +14,6 @@ host_keys_required() {
 	else
 		# No HostKey directives found, so we pick secure defaults
 		echo /etc/ssh/ssh_host_ed25519_key
-		echo /etc/ssh/ssh_host_rsa_key
 	fi
 }
 
diff --git a/projectroot/etc/ssh/sshd_config b/projectroot/etc/ssh/sshd_config
index 14ae11901..297edd854 100644
--- a/projectroot/etc/ssh/sshd_config
+++ b/projectroot/etc/ssh/sshd_config
@@ -15,7 +15,7 @@
 #ListenAddress 0.0.0.0
 #ListenAddress ::
 
-HostKey /etc/ssh/ssh_host_rsa_key
+#HostKey /etc/ssh/ssh_host_rsa_key
 #HostKey /etc/ssh/ssh_host_dsa_key
 #HostKey /etc/ssh/ssh_host_ecdsa_key
 HostKey /etc/ssh/ssh_host_ed25519_key
-- 
2.17.0


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de