Hello World

報告內容

Summary
The remote SSH server is configured to allow / support weak host
key algorithm(s).
Detection Result
The remote SSH server supports the following weak host key algorithm(s):

host key algorithm | Description
-----------------------------------------------------------------------------------------
ssh-dss            | Digital Signature Algorithm (DSA) / Digital Signature Standard (DSS)
Detection Method
Checks the supported host key algorithms of the remote SSH
server.

Currently weak host key algorithms are defined as the following:

- ssh-dss: Digital Signature Algorithm (DSA) / Digital Signature Standard (DSS)
Details:
Weak Host Key Algorithm(s) (SSH) OID: 1.3.6.1.4.1.25623.1.0.117687
Version used:
2021-11-24T06:31:19Z
Solution
Solution Type:
Mitigation
Disable the reported weak host key algorithm(s).

修正方式

1. 編輯 /etc/ssh/sshd_config
找到以下字串
HostKey /etc/ssh/ssh_host_dsa_key
將該行註解，如
#HostKey /etc/ssh/ssh_host_dsa_key

2. 重啟 sshd 服務
systemctl restart ssh