vyatta-service-ssh (0.25) unstable; urgency=medium

  * Pin down which sshd -T lines the cipher and kex lists are read from.
    Both were scraped with an unanchored grep:

      sshd -T -f /dev/null | grep kexalgorithms | cut -d ' ' -f 2

    "grep kexalgorithms" matches substrings, and current OpenSSH also emits
    gssapikexalgorithms, so two lines came back. cut printed both, chomp only
    stripped the trailing newline, and the embedded one went straight into
    sshd_config -- leaving a KexAlgorithms line carrying the GSSAPI values
    followed by an orphan line holding the real list with no keyword in front
    of it. sshd -t rejected the file, so ExecStartPre failed and ssh.service
    never started: the image had no remote management at all. Even had it
    parsed, KexAlgorithms would have been set to the GSSAPI algorithms.

    Both lookups now use awk anchored to the directive name and stop at the
    first match, so exactly one value can come back:

      sshd -T -f /dev/null | awk '/^kexalgorithms /{print $2; exit}'

    The cipher lookup had the same unanchored shape and is fixed the same
    way, before some future OpenSSH grows a second line matching "cipher".

 -- DANOS Package Maintainers <DANOS@att.com>  Wed, 19 Aug 2026 22:00:00 +0000

vyatta-service-ssh (0.24) unstable; urgency=medium

  [ Gavin Shearer ]
  * need libpam-systemd package to login correctly over a vrf

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Wed, 10 Mar 2021 16:58:24 +0000

vyatta-service-ssh (0.23) unstable; urgency=medium

  * ssh for ipv6 fails upon reboot

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Tue, 02 Mar 2021 14:51:06 +0000

vyatta-service-ssh (0.22) unstable; urgency=medium

  [ Ramkumar Ganapathysubramanian ]
  * Add a new keep-alive timer configuration for SSH

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Wed, 17 Feb 2021 14:10:20 +0000

vyatta-service-ssh (0.21) unstable; urgency=medium

  [ William Ivory ]
  * Address NCS-specific YANG compile error

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Thu, 24 Sep 2020 17:13:35 +0100

vyatta-service-ssh (0.20) unstable; urgency=medium

  * ssh listen-address upper limit not communicated or enforced

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Mon, 21 Sep 2020 12:26:39 +0100

vyatta-service-ssh (0.19) unstable; urgency=medium

  * "Missing privilege separation directory: /run/sshd" on creating user
  * Commit failure with ssh cipher options cast128-cbc and blowfish-cbc
  * Remove "legacy" cipher 3des-cbc as option for SSH

 -- Mike Manning <mmanning@vyatta.att-mail.com>  Tue, 31 Mar 2020 11:37:16 +0100

vyatta-service-ssh (0.18) unstable; urgency=medium

  * DANOS Import Master

 -- Vyatta Package Maintainers <DL-vyatta-help@att.com>  Thu, 07 Nov 2019 08:32:54 +0000
