From owner-freebsd-stable@FreeBSD.ORG Thu Aug 14 17:34:04 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1D2B71065693 for ; Thu, 14 Aug 2008 17:34:04 +0000 (UTC) (envelope-from ronald-freebsd8@klop.yi.org) Received: from smtp-out2.tiscali.nl (smtp-out2.tiscali.nl [195.241.79.177]) by mx1.freebsd.org (Postfix) with ESMTP id E6DA58FC12 for ; Thu, 14 Aug 2008 17:34:03 +0000 (UTC) (envelope-from ronald-freebsd8@klop.yi.org) Received: from [212.123.145.58] (helo=guido.klop.ws) by smtp-out2.tiscali.nl with smtp id 1KTgi2-0007Pr-EL for ; Thu, 14 Aug 2008 19:34:02 +0200 Received: (qmail 13999 invoked from network); 14 Aug 2008 17:34:01 -0000 Received: from localhost (HELO 82-170-177-25.ip.telfort.nl) (127.0.0.1) by localhost with SMTP; 14 Aug 2008 17:34:01 -0000 Date: Thu, 14 Aug 2008 19:34:00 +0200 To: "Gavin Spomer" , freebsd-stable@freebsd.org From: "Ronald Klop" Content-Type: text/plain; format=flowed; delsp=yes; charset=us-ascii MIME-Version: 1.0 References: <48A40805020000900001C185@hermes.cwu.edu> Content-Transfer-Encoding: 7bit Message-ID: In-Reply-To: <48A40805020000900001C185@hermes.cwu.edu> User-Agent: Opera Mail/9.51 (FreeBSD) Cc: Subject: Re: ssh-keygen between SuSE and FreeBSD X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Aug 2008 17:34:04 -0000 On Thu, 14 Aug 2008 19:25:09 +0200, Gavin Spomer wrote: [snip] >> I'm not quite sure right now why you're using rsa keys. I'm always using >> dsa keys (ssh-keygen -t dsa). It comes to my mind, that rsa keys are for >> ssh version 1, while dsa keys are for ssh version 2. >> But I could be wrong here ;) >> No man ssh handy right now, sorry. > > If that's true, then I believe I will start using the dsa ones! I think > I chose rsa because the FreeBSD manual indicated I could use either and > I could only find settings for enabling rsa in sshd_config on the remote > servers, but I'll look again... This story about rsa and dsa is not true. Rsa wasn't free (patents or something else) until a few years ago. So everybody used dsa. But since quite some time it doesn't matter what you use. I don't know about advantages of one above the other. In daily use they are the same. Ronald.