Unverified Commit cd233b34 authored by Philip Taron's avatar Philip Taron Committed by GitHub
Browse files

nixos/sshd: don't set KDF rounds for host keys (#415385)

parents 794e7a17 6acf53f6

nixos/modules/services/networking/ssh/sshd.nix

+0 −3
Original line number Diff line number Diff line
@@ -366,13 +366,11 @@ in 
            type = "rsa";

            bits = 4096;

            path = "/etc/ssh/ssh_host_rsa_key";

            rounds = 100;

            openSSHFormat = true;

          }

          {

            type = "ed25519";

            path = "/etc/ssh/ssh_host_ed25519_key";

            rounds = 100;

            comment = "key comment";

          }

        ];
@@ -798,7 +796,6 @@ in 
              ssh-keygen \

                -t "${k.type}" \

                ${lib.optionalString (k ? bits) "-b ${toString k.bits}"} \

                ${lib.optionalString (k ? rounds) "-a ${toString k.rounds}"} \

                ${lib.optionalString (k ? comment) "-C '${k.comment}'"} \

                ${lib.optionalString (k ? openSSHFormat && k.openSSHFormat) "-o"} \

                -f "${k.path}" \