Changeset 52807 for trunk/src/wp-admin/includes/class-wp-filesystem-ssh2.php

Timestamp:

02/27/2022 03:00:58 PM (22 months ago)

Author:

SergeyBiryukov

Message:

Filesystem API: Include the ssh-ed25519 public key signature algorithm as an alternative to ssh-rsa.

The ssh-rsa signature algorithm is disabled by default as of OpenSSH 8.8, which breaks SSH2 uploads in WordPress on modern systems. ssh-ed25519 is one of the suggested alternatives, supported since OpenSSH 6.5.

References:

• ​OpenSSH 8.2 release notes
• ​OpenSSH 8.7 release notes
• ​OpenSSH 8.8 release notes

Follow-up to [8865].

Props richybkreckel, dd32.
Fixes #52409.

File:

• trunk/src/wp-admin/includes/class-wp-filesystem-ssh2.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-wp-filesystem-ssh2.php

@@ -89 +89 @@
             $this->options['private_key'] = $opt['private_key'];
 
-            $this->options['hostkey'] = array( 'hostkey' => 'ssh-rsa' );
+            $this->options['hostkey'] = array( 'hostkey' => 'ssh-rsa,ssh-ed25519' );
 
             $this->keys = true;