Re: Does ssh support nonRSA PKC?

[John Dalbec <jdalbec@cboss.com>]

> all patent-encumbered algorithms removed (to external libraries), all
                                            ^^^=libssl09
/usr/doc/libssl09/copyright:
This version of openssl is NOT linked againts RSAREF, so it can not be
used in the US without violating the RSA patent.

The man page suggests that RSA is the only available public-key method:

                             Note that by default sshd(8) will be installed so
                             that it requires successful RSA host authentica-
                             tion before permitting .rhosts authentication.
--
                             file, login is automatically permitted provided
                             client and server user names are the same.  Addi-
                             tionally, successful RSA host authentication is
                             normally required.  This file should only be
                             writable by root.
--

     libcrypto.so.X.1        A version of this library which includes support
                             for the RSA algorithm is required for proper op-
                             eration.

I suppose it won't hurt to use telnet for another 6 months.
John