summaryrefslogtreecommitdiff
path: root/releasenotes/notes/keypair-create-client-side-generation-73d8dd36192f70c9.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'releasenotes/notes/keypair-create-client-side-generation-73d8dd36192f70c9.yaml')
-rw-r--r--releasenotes/notes/keypair-create-client-side-generation-73d8dd36192f70c9.yaml11
1 files changed, 11 insertions, 0 deletions
diff --git a/releasenotes/notes/keypair-create-client-side-generation-73d8dd36192f70c9.yaml b/releasenotes/notes/keypair-create-client-side-generation-73d8dd36192f70c9.yaml
new file mode 100644
index 00000000..bf5fd5b7
--- /dev/null
+++ b/releasenotes/notes/keypair-create-client-side-generation-73d8dd36192f70c9.yaml
@@ -0,0 +1,11 @@
+---
+features:
+ - |
+ The ``openstack keypair create`` command will now generate keypairs on the
+ client side in ssh-ed25519 format. The Compute service no longer supports
+ server-side key generation starting with ``--os-compute-api-version 2.92``
+ while the use of ssh-ed25519 is necessary as support for ssh-rsa has been
+ disabled by default starting in OpenSSH 8.8, which prevents its use in
+ guests using this version of OpenSSH in the default configuration.
+ ssh-ed25519 support is widespread and is supported by OpenSSH 6.5 or later
+ and Dropbear 2020.79 or later.