Ignore insecure ssh.KeyAlgoDSA usages using nolint

hslatman · hslatman · commit f8c1eaf36f68 · 2025-06-09T20:43:08.000+02:00
diff --git a/command/crypto/key/format.go b/command/crypto/key/format.go
@@ -286,7 +286,7 @@ func formatAction(ctx *cli.Context) error {
 func isSSHPublicKey(in []byte) bool {
 	switch {
 	case bytes.HasPrefix(in, []byte(ssh.KeyAlgoRSA)),
-		bytes.HasPrefix(in, []byte(ssh.KeyAlgoDSA)),
+		bytes.HasPrefix(in, []byte(ssh.InsecureKeyAlgoDSA)), //nolint:staticcheck // compatibility with older tooling
 		bytes.HasPrefix(in, []byte(ssh.KeyAlgoECDSA256)),
 		bytes.HasPrefix(in, []byte(ssh.KeyAlgoECDSA384)),
 		bytes.HasPrefix(in, []byte(ssh.KeyAlgoECDSA521)),
diff --git a/internal/sshutil/sshutil.go b/internal/sshutil/sshutil.go
@@ -58,7 +58,7 @@ func PublicKey(key ssh.PublicKey) (crypto.PublicKey, error) {
 		return parseECDSA(in)
 	case ssh.KeyAlgoED25519, ssh.KeyAlgoSKED25519:
 		return parseED25519(in)
-	case ssh.KeyAlgoDSA:
+	case ssh.InsecureKeyAlgoDSA: //nolint:staticcheck // compatibility with older tooling
 		return parseDSA(in)
 	default:
 		return nil, errors.Errorf("public key %s is not supported", key.Type())
@@ -98,7 +98,7 @@ func publicKeyTypeAndSize(key ssh.PublicKey) (string, int, error) {
 			return "", 0, err
 		}
 		size = 8 * k.Size()
-	case ssh.KeyAlgoDSA:
+	case ssh.InsecureKeyAlgoDSA: //nolint:staticcheck // compatibility with older tooling
 		typ = "DSA"
 		_, in, ok := parseString(key.Marshal())
 		if !ok {
