PSA: Your ssh-rsa keys are NOT BEING DEPRECATED in ssh. ssh-rsa keys can, under the hood, be used with SHA-1 signatures or SHA-256 signatures. You don't need to regenerate your keys. No need to panic.
Show this thread
-
That said, if you're reconfiguring servers and clients anyway, wouldn't it be a good excuse to migrate to ssh-ed25519? I've started pushing out this cipher suite config to most of my boxes: https://www.antikernel.net/temp/sshd_config …
I migrated to ed25519 for authentication, then started using hardware tokens and migrated back to RSA.
