From 65d16ffe5945224a430c6a87d3216adc4dcb19d9 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Sep 20 2013 15:25:17 +0000
Subject: sshd-keygen: generate only RSA keys by default (#1010092)


---

diff --git a/sshd-keygen b/sshd-keygen
index adb5b88..737aa88 100644
--- a/sshd-keygen
+++ b/sshd-keygen
@@ -4,6 +4,7 @@
 #
 # The creation is controlled by the $AUTOCREATE_SERVER_KEYS environment
 # variable.
+AUTOCREATE_SERVER_KEYS=RSAONLY
 
 # source function library
 . /etc/rc.d/init.d/functions
diff --git a/sshd.sysconfig b/sshd.sysconfig
index b10a89d..9a30a83 100644
--- a/sshd.sysconfig
+++ b/sshd.sysconfig
@@ -2,11 +2,11 @@
 
 # The server keys are automatically generated if they ommited
 # to change the automatic creation uncomment the approprite 
-# line.
+# line. The default is RSAONLY
 
 # AUTOCREATE_SERVER_KEYS=RSAONLY
 # AUTOCREATE_SERVER_KEYS=NO
-AUTOCREATE_SERVER_KEYS=YES
+# AUTOCREATE_SERVER_KEYS=YES
 
 # Do not change this option unless you have hardware random
 # generator and you REALLY know what you are doing