dropbear: disable RSA-SHA1 by default
authorKonstantin Demin <rockdrilla@gmail.com>
Tue, 8 Jul 2025 16:12:26 +0000 (19:12 +0300)
committerPaul Spooren <mail@aparcar.org>
Fri, 11 Jul 2025 09:23:50 +0000 (11:23 +0200)
Upstream has disabled SHA-1 algorithms by default since version 2025.87.
SHA-1 has known weakness and most SSH implementations support alternatives.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
package/network/services/dropbear/Config.in

index c5737c05ca40f5f2886e501732961de9e75196a1..e677ef5edca96c12389505be27d2419d1ab7e9ce 100644 (file)
@@ -822,7 +822,6 @@ menu "Encryption options"
 
        config DROPBEAR_RSA_SHA1
                bool "RSA-SHA1 [WEAK]"
-               default y
                depends on DROPBEAR_LEGACY_COMPAT
                help
                        This enables the following public key algorithm: