ref(ssh keys): remove support for DSA

Author: Vaughn Dice

charts/builder/templates/builder-secret-ssh-private-keys.yaml

@@ -9,5 +9,4 @@ metadata:
 type: Opaque
 data:
   ssh-host-rsa-key: "{{genPrivateKey "rsa" | b64enc}}"
-  ssh-host-dsa-key: "{{genPrivateKey "dsa" | b64enc}}"
   ssh-host-ecdsa-key: "{{genPrivateKey "ecdsa" | b64enc}}"

pkg/sshd/server.go

@@ -78,7 +78,7 @@ func Configure(cnf *Config) (*ssh.ServerConfig, error) {
 			return AuthKey(k, cnf)
 		},
 	}
-	hostKeyTypes := []string{"rsa", "dsa", "ecdsa"}
+	hostKeyTypes := []string{"rsa", "ecdsa"}
 	pathTpl := "/var/run/secrets/deis/builder/ssh/ssh-host-%s-key"
 	for _, t := range hostKeyTypes {
 		path := fmt.Sprintf(pathTpl, t)

rootfs/etc/ssh/sshd_config

@@ -1,7 +1,6 @@
 Port 2223
 Protocol 2
 HostKey /var/run/secrets/deis/builder/ssh/ssh-host-rsa-key
-HostKey /var/run/secrets/deis/builder/ssh/ssh-host-dsa-key
 HostKey /var/run/secrets/deis/builder/ssh/ssh-host-ecdsa-key
 UsePrivilegeSeparation yes
 KeyRegenerationInterval 3600