From 65d16ffe5945224a430c6a87d3216adc4dcb19d9 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Fri, 20 Sep 2013 17:25:17 +0200
Subject: [PATCH] sshd-keygen: generate only RSA keys by default (#1010092)

---
 sshd-keygen    | 1 +
 sshd.sysconfig | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/sshd-keygen b/sshd-keygen
index adb5b88..737aa88 100644
--- a/sshd-keygen
+++ b/sshd-keygen
@@ -4,6 +4,7 @@
 #
 # The creation is controlled by the $AUTOCREATE_SERVER_KEYS environment
 # variable.
+AUTOCREATE_SERVER_KEYS=RSAONLY
 
 # source function library
 . /etc/rc.d/init.d/functions
diff --git a/sshd.sysconfig b/sshd.sysconfig
index b10a89d..9a30a83 100644
--- a/sshd.sysconfig
+++ b/sshd.sysconfig
@@ -2,11 +2,11 @@
 
 # The server keys are automatically generated if they ommited
 # to change the automatic creation uncomment the approprite 
-# line.
+# line. The default is RSAONLY
 
 # AUTOCREATE_SERVER_KEYS=RSAONLY
 # AUTOCREATE_SERVER_KEYS=NO
-AUTOCREATE_SERVER_KEYS=YES
+# AUTOCREATE_SERVER_KEYS=YES
 
 # Do not change this option unless you have hardware random
 # generator and you REALLY know what you are doing