ci: remove deprecated SSH config options

Remove deprecated OpenSSH configuration options from ci/test.sh:
- Protocol 2 (deprecated since OpenSSH 7.4)
- RSAAuthentication (deprecated since OpenSSH 7.4)
- ChallengeResponseAuthentication (deprecated since OpenSSH 9.6)
- HostCertificate pointing to .pub file (invalid configuration)
- Duplicate HostKey directive

These options were causing warnings with OpenSSH 10.0 in Fedora Rawhide
and preventing SSH tests from functioning properly.

Tested with OpenSSH 10.0p2 on Fedora Rawhide.
This commit is contained in:
Łukasz Langa
2025-10-23 21:16:38 +02:00
parent 0abde52675
commit 2528c88f50

View File

@@ -216,18 +216,13 @@ if should_run "SSH_TESTS"; then
cat >"${SSHD_DIR}/sshd_config" <<-EOF
Port 2222
ListenAddress 0.0.0.0
Protocol 2
HostKey ${SSHD_DIR}/id_${GITTEST_SSH_KEYTYPE}
PidFile ${SSHD_DIR}/pid
AuthorizedKeysFile ${HOME}/.ssh/authorized_keys
LogLevel DEBUG
RSAAuthentication yes
PasswordAuthentication yes
PubkeyAuthentication yes
ChallengeResponseAuthentication no
StrictModes no
HostCertificate ${SSHD_DIR}/id_${GITTEST_SSH_KEYTYPE}.pub
HostKey ${SSHD_DIR}/id_${GITTEST_SSH_KEYTYPE}
# Required here as sshd will simply close connection otherwise
UsePAM no
EOF