Followup-For: Bug #873019
Package: shellinabox
Version: 2.21
Tags: patch
When using the built-in SSH service description, that produces
command-line line 0: Unsupported option "rhostsrsaauthentication"
command-line line 0: Unsupported option "rsaauthentication"
this is because SSH is mapped (initService function) to running ssh(1)
with a bunch of options which include
-oRhostsRSAAuthentication=no -oRSAAuthentication=no
However, these options were removed in OpenSSH 7.4 along SSH 1 support,
as documented by Colin in
https://salsa.debian.org/ssh-team/openssh/-/commit/fb87db8aa47d3508be8e5bb1d21897fa1f2eca90
(debian bug #851573)
The attached patch solves it.
Upstream bug: https://github.com/shellinabox/shellinabox/issues/458
--- shellinabox/service.c1 2016-11-09 18:40:20.000000000 +0100
+++ shellinabox/service.c 2021-03-07 00:47:20.727795214 +0100
@@ -175,8 +175,7 @@
"-oHostbasedAuthentication=no -oIdentitiesOnly=yes "
"-oKbdInteractiveAuthentication=yes -oPasswordAuthentication=yes "
"-oPreferredAuthentications=keyboard-interactive,password "
- "-oPubkeyAuthentication=no -oRhostsRSAAuthentication=no "
- "-oRSAAuthentication=no -oStrictHostKeyChecking=no -oTunnel=no "
+ "-oPubkeyAuthentication=no -oStrictHostKeyChecking=no -oTunnel=no "
"-oUserKnownHostsFile=/dev/null -oVerifyHostKeyDNS=no "
// beewoolie-2012.03.30: while it would be nice to disable this
// feature, we cannot be sure that it is available on the
