2023-03-04 22:38:38 +05:30
|
|
|
- title: "Optional enforcement of SSH expiration"
|
2022-07-16 23:28:13 +05:30
|
|
|
announcement_milestone: "14.8"
|
|
|
|
|
announcement_date: "2022-02-22"
|
|
|
|
|
removal_milestone: "15.0"
|
|
|
|
|
removal_date: "2022-05-22"
|
|
|
|
|
breaking_change: true
|
|
|
|
|
reporter: stkerr
|
|
|
|
|
body: |
|
|
|
|
|
Disabling SSH expiration enforcement is unusual from a security perspective and could create unusual situations where an expired
|
|
|
|
|
key is unintentionally able to be used. Unexpected behavior in a security feature is inherently dangerous and so now we enforce
|
|
|
|
|
expiration on all SSH keys.
|
|
|
|
|
issue_url: "https://gitlab.com/gitlab-org/gitlab/-/issues/351963"
|
|
|
|
|
documentation_url: "https://docs.gitlab.com/ee/user/admin_area/settings/account_and_limit_settings.html#allow-expired-ssh-keys-to-be-used-deprecated"
|
