From 33056ea1e1d351b1d8c05fc2638076ed9d50fcbc Mon Sep 17 00:00:00 2001 From: "djm@openbsd.org" Date: Wed, 7 Oct 2026 22:29:49 +0000 Subject: [PATCH] upstream: enable ssh-mldsa44-ed25519 as an allowed CA signature algorithm; missed in previous commit to reenable the algorithm OpenBSD-Commit-ID: 15c1292f5f19c67fe922758b6521d181f969d57b --- myproposal.h | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/myproposal.h b/myproposal.h index f4fb707c9..31d036e9a 100644 --- a/myproposal.h +++ b/myproposal.h @@ -1,4 +1,4 @@ -/* $OpenBSD: myproposal.h,v 1.82 2026/09/02 09:04:11 djm Exp $ */ +/* $OpenBSD: myproposal.h,v 1.83 2026/10/07 22:29:49 djm Exp $ */ /* * Copyright (c) 2000 Markus Friedl. All rights reserved. @@ -93,7 +93,8 @@ "sk-ecdsa-sha2-nistp256@openssh.com," \ "webauthn-sk-ecdsa-sha2-nistp256@openssh.com," \ "rsa-sha2-512," \ - "rsa-sha2-256" \ + "rsa-sha2-256," \ + "ssh-mldsa44-ed25519" #define KEX_DEFAULT_COMP "none,zlib@openssh.com" #define KEX_DEFAULT_LANG ""