From c32d4acc8b6f5c4f378be045cd11ce85f77a6c16 Mon Sep 17 00:00:00 2001
From: Jan F. Chadima <jfch2222@fedoraproject.org>
Date: Dec 04 2009 13:31:18 +0000
Subject: Add possibility to autocreate only RSA key into initscript


---

diff --git a/openssh.spec b/openssh.spec
index 78da237..a925d64 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -69,7 +69,7 @@
 Summary: An open source implementation of SSH protocol versions 1 and 2
 Name: openssh
 Version: 5.3p1
-Release: 11%{?dist}%{?rescue_rel}
+Release: 12%{?dist}%{?rescue_rel}
 URL: http://www.openssh.com/portable.html
 #URL1: http://pamsshauth.sourceforge.net
 #Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz
@@ -525,6 +525,9 @@ fi
 %endif
 
 %changelog
+* Fri Dec  4 2009 Jan F. Chadima <jchadima@redhat.com> - 5.3p1-12
+- Add possibility to autocreate only RSA key into initscript (#533339)
+
 * Fri Nov 27 2009 Jan F. Chadima <jchadima@redhat.com> - 5.3p1-11
 - Prepare NSS key patch for future SEC_ERROR_LOCKED_PASSWORD (#537411)
 
diff --git a/sshd.init b/sshd.init
index 3bc2cc4..889c776 100755
--- a/sshd.init
+++ b/sshd.init
@@ -122,9 +122,11 @@ start()
 	[ -f /etc/ssh/sshd_config ] || exit 6
 	# Create keys if necessary
 	if [ "x${AUTOCREATE_SERVER_KEYS}" != xNO ]; then
-		do_rsa1_keygen
 		do_rsa_keygen
-		do_dsa_keygen
+		if [ "x${AUTOCREATE_SERVER_KEYS}" != xRSAONLY ]; then
+			do_rsa1_keygen
+			do_dsa_keygen
+		fi
 	fi
 
 	echo -n $"Starting $prog: "