[security] Do not generate ssh server keys for non RSA protocols (son…

…ic-net#2718)
SONIC-DEV · Apr 10, 2019 · d19d9f4 · d19d9f4
1 parent d0c9d6a
commit d19d9f4
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/files/sshd/host-ssh-keygen.sh b/files/sshd/host-ssh-keygen.sh
@@ -1,10 +1,8 @@
 #!/bin/bash
 
+set -e
+
 [ -r /etc/ssh/ssh_host_rsa_key ] || {
     rm -f /etc/ssh/ssh_host_*_key*
     /usr/bin/ssh-keygen -t rsa -N '' -f /etc/ssh/ssh_host_rsa_key
-    /usr/bin/ssh-keygen -t dsa -N '' -f /etc/ssh/ssh_host_dsa_key
-    /usr/bin/ssh-keygen -t rsa1 -N '' -f /etc/ssh/ssh_host_key
-    /usr/bin/ssh-keygen -t ecdsa -N '' -f /etc/ssh/ssh_host_ecdsa_key
-    /usr/bin/ssh-keygen -t ed25519 -N '' -f /etc/ssh/ssh_host_ed25519_key
 }