Use post-quantum KEX algorithm #144

New Issue

2025-12-29T12:54:08Z

fkobi commented

2025-12-29 12:54:08 +00:00

WARNING: SSH connection failed when checking 'github.com/UI5/openui5'. Not updating database. STDERR was: ** WARNING: connection is not using a post-quant
um key exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
Connection to wrk1.api.reuse.software closed by remote host.

This happens only for big repositories:

$ du -sh gentoo/ openui5/
474M	gentoo/
661M	openui5/

For smaller repositories it works well

```log WARNING: SSH connection failed when checking 'github.com/UI5/openui5'. Not updating database. STDERR was: ** WARNING: connection is not using a post-quant um key exchange algorithm. ** This session may be vulnerable to "store now, decrypt later" attacks. ** The server may need to be upgraded. See https://openssh.com/pq.html Connection to wrk1.api.reuse.software closed by remote host. ``` This happens only for big repositories: ```console $ du -sh gentoo/ openui5/ 474M gentoo/ 661M openui5/ ``` For smaller repositories it works well

fkobi added the bug enhancement

component

backend

labels 2025-12-29 12:54:08 +00:00

fkobi added the 1.0 label 2026-02-09 10:38:07 +00:00

fkobi commented

2026-02-09 10:38:20 +00:00

2.0 does not use ssh

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: reuse/api#144