[wp-trac] [WordPress Trac] #52409: Upload method SSH2 shouldn't use hardwired ssh-rsa hostkey

WordPress Trac noreply at wordpress.org
Sun Feb 27 15:01:14 UTC 2022


#52409: Upload method SSH2 shouldn't use hardwired ssh-rsa hostkey
----------------------------+-----------------------------
 Reporter:  richybkreckel   |       Owner:  SergeyBiryukov
     Type:  defect (bug)    |      Status:  closed
 Priority:  normal          |   Milestone:  6.0
Component:  Filesystem API  |     Version:
 Severity:  normal          |  Resolution:  fixed
 Keywords:  dev-feedback    |     Focuses:
----------------------------+-----------------------------
Changes (by SergeyBiryukov):

 * owner:  (none) => SergeyBiryukov
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [changeset:"52807" 52807]:
 {{{
 #!CommitTicketReference repository="" revision="52807"
 Filesystem API: Include the `ssh-ed25519` public key signature algorithm
 as an alternative to `ssh-rsa`.

 The `ssh-rsa` signature algorithm is disabled by default as of OpenSSH
 8.8, which breaks SSH2 uploads in WordPress on modern systems. `ssh-
 ed25519` is one of the suggested alternatives, supported since OpenSSH
 6.5.

 References:
 * [https://www.openssh.com/txt/release-8.2 OpenSSH 8.2 release notes]
 * [https://www.openssh.com/txt/release-8.7 OpenSSH 8.7 release notes]
 * [https://www.openssh.com/txt/release-8.8 OpenSSH 8.8 release notes]

 Follow-up to [8865].

 Props richybkreckel, dd32.
 Fixes #52409.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52409#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list