OpenSSH to remove DSA key type early 2025

OpenSSH (OpenSSH)  is "the premier connectivity tool for remote login with the SSH protocol", including ssh, scp and sftp. I understand that they plan to remove support for the DSA signature algorithm from the first release after January 2025 (see release notes for v9.9 2024-09-19 OpenSSH: Release Notes). Support has only been provided at runtime since 2015.

 

I have a couple of clients using our solutions to integrate to FTP servers, and it appears that both servers use DSA keys. I thought it might be worth putting this onto the forum in case others are affected. The solution requires FTP servers to be re-configured for alternative keys (eg RSA 2048-bit).