Skip to content

ssh: add warnings on DSA usage#158

Merged
lbajolet-hashicorp merged 1 commit intomainfrom
dsa_doc_warnings
Feb 1, 2023
Merged

ssh: add warnings on DSA usage#158
lbajolet-hashicorp merged 1 commit intomainfrom
dsa_doc_warnings

Conversation

@lbajolet-hashicorp
Copy link
Copy Markdown
Contributor

The DSA signature algorithm is not considered secure anymore, and is actively deprecated in the Go crypto libs (SEE https://pkg.go.dev/crypto/dsa).

To let users know that they should not use that anymore, we add a notice in the comments for the SSH private key options.

This is linked to PR #153, where the imports for the DSA package were annotated as nolint as importing them triggers lint warnings.

@lbajolet-hashicorp lbajolet-hashicorp requested a review from a team as a code owner February 1, 2023 19:27
The DSA signature algorithm is not considered secure anymore, and is
actively deprecated in the Go crypto libs.

To let users know that they should not use that anymore, we add a notice
in the comments for the SSH private key options.
Copy link
Copy Markdown
Contributor

@nywilken nywilken left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@lbajolet-hashicorp lbajolet-hashicorp merged commit 0ab9c86 into main Feb 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants