SSH Reference Manual

Considerations

• If a HOSTKEY

file exists, then no new local host key is generated. In this case the value of parameter

HOSTKEYBITS is not relevant.

• During startup, the key length of the local host key is now logged.

• In case a local host key is generated at startup of the SSH2 process, then the supported key size depends on the

host key type: For type RSA key sizes 1024 and 2048 are supported, for type DSA only 1024 is supported.

• Key sizes 1024/2048 for RSA and 1024 for DSA have always been supported as remote host key sizes. The

parameter HOSTKEYBITS is only relevant for local host keys.

Example

HOSTKEYBITS 2048

See also

HOSTKEY, HOSTKEYTYPE

HOSTKEYTYPE

A local host key is generated whenever the SSH2 process detects at startup that no local host key file exists. The type of

the local host key that gets generated can be configured using parameter HOSTKEYTYPE.

Parameter Syntax

HOSTKEYTYPE RSA|DSA

Arguments

RSA|DSA

Specifies the type of the local host key in case one needs to be generated. Valid values are:

o RSA: The local host key will be of type RSA if newly generated at startup.

o DSA: The local host key will be of type DSA if newly generated at startup.

Default

If omitted, value DSA is the default value, as before introduction of this parameter.

Considerations

• If a HOSTKEY

file exists, then no new local host key is generated. In this case the value of parameter

HOSTKEYTYPE is not relevant.

• In case a local host key is generated at startup of the SSH2 process, then the supported key size depends on the

host key type: For type RSA key sizes 1024 and 2048 are supported, for type DSA only 1024 is supported.

• Key types RSA and DSA have always been supported as remote host key types. The parameter

HOSTKEYTYPE is only relevant for local host keys.

Example

HOSTKEYTYPE RSA