Documentation updates - October 23, 2026

Summary of documentation changes made on October 23, 2026.

Authentication & AAA

• Certificates, User: Certificates and SSH keys with a weak RSA public exponent (7 or lower) keep working, but are flagged with the comment key uses insecure RSA public exponent! in the /certificate/print, /user/ssh-keys and /user/ssh-keys/private output. Replace them with stronger keys. Also added to the 7.25 manual.

Management Tools

• SSH: An RSA host key with a weak public exponent is regenerated automatically and the event is logged (host key uses insecure RSA public exponent! Host key will be regenerated!). After any regeneration, clients that pinned the old key report a fingerprint mismatch. Also added to the 7.25 manual.