2454636386
Starting with the 2.92 microversion, nova will no longer generate SSH keys. Avoid breaking users by generating keypairs ourselves using the cryptography library, which was already an indirect dependency through openstacksdk. Change-Id: I3ad2732f70854ab72da0947f00847351dda23944 Implements: blueprint keypair-generation-removal
12 lines
594 B
YAML
12 lines
594 B
YAML
---
|
|
features:
|
|
- |
|
|
The ``openstack keypair create`` command will now generate keypairs on the
|
|
client side in ssh-ed25519 format. The Compute service no longer supports
|
|
server-side key generation starting with ``--os-compute-api-version 2.92``
|
|
while the use of ssh-ed25519 is necessary as support for ssh-rsa has been
|
|
disabled by default starting in OpenSSH 8.8, which prevents its use in
|
|
guests using this version of OpenSSH in the default configuration.
|
|
ssh-ed25519 support is widespread and is supported by OpenSSH 6.5 or later
|
|
and Dropbear 2020.79 or later.
|