- stevesk@cvs.openbsd.org 2002/03/29 19:16:22

     [sshd.8]
     RSA key modulus size minimum 768; ok markus@

diff --git a/ChangeLog b/ChangeLog
index 1e9318188e1fc1e18fc1b0f16114f665eecd554e..36a651c1a1c821fd5948e9d44704c703acef61e6 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -13,6 +13,9 @@
    - markus@cvs.openbsd.org 2002/03/29 18:59:32
      [session.c session.h]
      retrieve last login time before the pty is allocated, store per session
+   - stevesk@cvs.openbsd.org 2002/03/29 19:16:22
+     [sshd.8]
+     RSA key modulus size minimum 768; ok markus@
 
 20020401
  - (stevesk) [monitor.c] PAM should work again; will *not* work with

diff --git a/sshd.8 b/sshd.8
index b99708ef38ca9cb1a16933581cba6196276b8723..eb5c8f1da3bd087a4d11b98e6c62b1684854a08f 100644 (file)
--- a/sshd.8
+++ b/sshd.8
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: sshd.8,v 1.174 2002/03/26 11:34:49 markus Exp $
+.\" $OpenBSD: sshd.8,v 1.175 2002/03/29 19:16:22 stevesk Exp $
 .Dd September 25, 1999
 .Dt SSHD 8
 .Os
@@ -1036,6 +1036,10 @@ or the
 .Pa id_rsa.pub
 file and edit it.
 .Pp
+.Nm
+enforces a minimum RSA key modulus size for protocol 1
+and protocol 2 keys of 768 bits.
+.Pp
 The options (if present) consist of comma-separated option
 specifications.
 No spaces are permitted, except within double quotes.