SSH host-key algorithm configuration

You can use the [set system service ssh hostkey-algorithm-list] configuration statement to specify SSH host-key algorithms and automatically disable the remaining unspecified hostkey algorithms.

In 25.2R1, we introduced new options on all Junos OS platforms that enable RSA hostkey signatures using SHA-256 and SHA-512 hash algorithms:

• set system service ssh hostkey-algorithm-list rsa-sha2-256
• set system service ssh hostkey-algorithm-list rsa-sha2-512

Additionally, we disabled the SHA-1 has algorithm by default and deprecated the [set system services ssh hostkey-algorithm-lis rsa] command.