Changeset 53022

Timestamp:

03/29/2022 04:28:45 PM (2 years ago)

Author:

audrasjb

Message:

Filesystem API: Include the ssh-ed25519 public key signature algorithm as an alternative to ssh-rsa.

The ssh-rsa signature algorithm is disabled by default as of OpenSSH 8.8, which breaks SSH2 uploads in WordPress on modern systems. ssh-ed25519 is one of the suggested alternatives, supported since OpenSSH 6.5.

References:

• OpenSSH 8.2 release notes
• OpenSSH 8.7 release notes
• OpenSSH 8.8 release notes

Follow-up to [8865].

Props richybkreckel, dd32, SergeyBiryukov.
Merges [52807] to the 5.9 branch.
Fixes #52409.

Location:

branches/5.9

Files:

• . (modified) (1 prop)
• src/wp-admin/includes/class-wp-filesystem-ssh2.php (modified) (1 diff)

branches/5.9/src/wp-admin/includes/class-wp-filesystem-ssh2.php

@@ -89 +89 @@
             $this->options['private_key'] = $opt['private_key'];
 
-            $this->options['hostkey'] = array( 'hostkey' => 'ssh-rsa' );
+            $this->options['hostkey'] = array( 'hostkey' => 'ssh-rsa,ssh-ed25519' );
 
             $this->keys = true;