SHA1 deprecated setting for SSH

Products

• CA API Gateway

Issue/Introduction

SHA1 deprecated setting for SSH vulnerability detected on API Gateway appliance.

Environment

All Supported versions of Gateway

Resolution

Comment this line in /etc/ssh/sshd_config file.

#HostKey /etc/ssh/ssh_host_rsa_key

Move these 2 files (/etc/ssh/ssh_host_rsa_key.pub and /etc/ssh/ssh_host_rsa_key) to /tmp directory.

Restart sshd service.