From a65e87276e15e5debece5d3565bcb7bf5c32eccc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dag-Erling=20Sm=C3=B8rgrav?= <des@FreeBSD.org>
Date: Fri, 22 Jan 2016 12:14:08 +0000
Subject: [PATCH] Do not generate RSA1 or DSA keys by default.

---
 etc/rc.d/sshd | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/etc/rc.d/sshd b/etc/rc.d/sshd
index 9f747164f88d..e6e28c74d47d 100755
--- a/etc/rc.d/sshd
+++ b/etc/rc.d/sshd
@@ -20,9 +20,9 @@ configtest_cmd="sshd_configtest"
 pidfile="/var/run/${name}.pid"
 extra_commands="configtest keygen reload"
 
-: ${sshd_rsa1_enable:="yes"}
+: ${sshd_rsa1_enable:="no"}
 : ${sshd_rsa_enable:="yes"}
-: ${sshd_dsa_enable:="yes"}
+: ${sshd_dsa_enable:="no"}
 : ${sshd_ecdsa_enable:="yes"}
 : ${sshd_ed25519_enable:="yes"}