Package: openssh-client-ssh1 Version: 1:7.5p1-17 Severity: wishlist Dear Maintainer,
While trying to connect to an old dropbear server, I was surprised to find that the 'openssh-client-ssh1' package was able to do that even though no version of dropbear has ever been able to use SSH1. It turns out that the openssh-client-ssh1 package provides a lot of important legacy SSH protocol features and versions which are no longer provided by the ordinary openssh-client package, only one of which is (non default!) support for SSH1. I'd like to update the package description to something like: ---- secure shell (SSH) client for legacy and deprecated SSH protocol versions and features including . - SSH protocol version 1 - ssh-rsa signatures - ssh-dss - RC4, Blowfish, DES and old DH groups - SHA-1 based KEX/MAC . This package is useful for logging in to old systems which are not compatible with current versions of OpenSSH. It should not normally be used with up-to-date systems. . In some countries it may be illegal to use any encryption at all without a special permit. . ---- My intent is to move the focus away from SSH 1 by listing some of the other major differences. I also threw out the references to rsh, rcp and rlogin, which have been obsolete for 25 years, i.e. so long that most users aren't helped by the comparison since they've never used rsh and friends. -- System Information: Debian Release: 13.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.12.57+deb13-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU.UTF-8 Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages openssh-client-ssh1 depends on: ii libc6 2.41-12 ii libselinux1 3.8.1-1 ii libssl3t64 3.5.4-1~deb13u1 ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1 openssh-client-ssh1 recommends no packages. openssh-client-ssh1 suggests no packages. -- no debconf information
