Skip to content

Commit cf9c333

Browse files
author
Piotr Domagała
committed
chore(sshd): exclude deprecated SSHv2 key exchange algorithms
1 parent 5fe6b14 commit cf9c333

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

rootfs/etc/ssh/sshd_config

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,3 +26,6 @@ TCPKeepAlive yes
2626
#AcceptEnv LANG LC_*
2727
Subsystem sftp /usr/lib/openssh/sftp-server
2828
UseDNS no
29+
Ciphers aes128-cbc,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
30+
Kexalgorithms diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,gss-gex-sha1-,gss-group1-sha1-,gss-group14-sha1-
31+
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com

0 commit comments

Comments
 (0)