How to modify RSA SSH Hostkey to 2048 bits on Brocade Switch
This KB article is linked to the Interactive Workflow Brocade Switch Troubleshooting Workflow.
Applies to
- Brocade Switch
- FOS 7.4.2x and above
Description
- Security scanner application detects the vulnerability "SSH Server Public Key Too Small" against Brocade FOS.
- RSA keys shorter than 2048 bits are considered vulnerable. Brocade recommends to install a RSA public key length of 2048 bits.
sshutil showhostkey
command shows that RSA bit is less than 2048 bits:
switch01:FID128:root> sshutil showhostkey
1024 44:c3:88:04:31:ca:40:95:12:75:c7:d9:24:fe:6d:23 (RSA)
256 8c:64:64:30:77:ed:75:33:72:b1:37:e3:07:97:26:8b (ECDSA)
1024 c0:74:9a:14:78:6e:4d:a6:0b:35:e3:f1:df:41:0d:86 (DSA)