IT33247: SUPPRESS AUTOMATIC GENERATION OF SSH DSA KEYS

Fix packs for DataPower Gateway version 2018.4.1
Fix packs for DataPower Gateway version 10.0.x

APAR status

• Closed as program error.

Error description

• In recent penetration test, DataPower would be flagged with
  using 1024-bit DSA host-keys which is being too small.
  This is due to newer SSH specification which has deprecated DSA.
  

Local fix

• Disabling DSA in the user's administrative SSH clients would
  mitigate this issue.
  

Problem summary

• The device will no longer automatically generate DSA keys;
  existing keys will continue to function and new keys can be
  generated if explicitly called.
  

Problem conclusion

• Fix is available in 2018.4.1.13 and 10.0.0.1
  For a list of the latest fix packs available, please see:
  https://www.ibm.com/support/pages/node/83105
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R18X PSY

     UP

• RA0X PSY

     UP