Hi, so, just for posterity for others on this list: On Thu, 21 Oct 2021, Lars Vogdt wrote:
Something from RPM changelog, that might be worth a 2nd look? * This release disables RSA signatures using the SHA-1 hash algorithm by default.
Yeah, this is it. Unfortunately I'm constrained on the hosts from which I need to connect to that machine for the data syncing, so we needed to enable the old signature algos again, by adding this to sshd_config: HostkeyAlgorithms +ssh-rsa PubkeyAcceptedAlgorithms +ssh-rsa It's not exactly wonderful, but gcc-stats is basically only a data container for gcc.opensuse.org without any further services or influences, so somebody investing $50k and time to crack the ssh key should perhaps rather simply ask me and donate the money to openSUSE :-) Thanks Lars for the quick with the above. Ciao, Michael.