Comments (3)
scolby33
commented on June 26, 2024
I had success by commenting out the HostKey /etc/ssh/ssh_host_ecdsa directive. I didn't have the issue with ssh-dss, but there might be a HostKey for that as well.
from ssh-audit.
graysky2
commented on June 26, 2024
@takenek - I'm no expert but I am using the following in /etc/ssh/sshd_config on another distro:
KexAlgorithms [email protected],diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group18-sha512
MACs [email protected],[email protected],[email protected]
#Ciphers
HostKeyAlgorithms ssh-rsa,rsa-sha2-256,rsa-sha2-512
from ssh-audit.
takenek
commented on June 26, 2024
@graysky2 This is for OpenSSH 6.7?
I just put Your config and got it:
Oct 11 09:40:10 zabbix sshd[41017]: /etc/ssh/sshd_config line 89: Bad SSH2 KexAlgorithms '[email protected],diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group18-sha512'.
And the most important "HostKeyAlgorithms" is not support in OpenSSH <7.0 so You can`t use this in old Linux distro.
from ssh-audit.
Related Issues (20)
- Detect weak Diffie-Hellman parameters HOT 2
- Bare ipv6 addresses don't work HOT 2
- Question about nistp256 etc HOT 3
- `[exception] did not receive banner.` exception HOT 8
- Please do not import colorama on posix systems
- Feature request: detect SSHFP DNS records and compare with server fingerprint HOT 3
- SSH version 1 should be removed
- publish to pypi? HOT 1
- Add ProFTPd to known SSH softwares
- New algorithms HOT 3
- Recognize curve25519-sha256 in addition to [email protected] HOT 2
- feature-request : support options in any order
- No updates in 2 years ... is this project no longer active? HOT 17
- Add install / run instructions to README
- Add support for RFC 8308
- Add support for new quantum-resistant key exchange HOT 2
- Why is there a warning about encrypt-and-mac? HOT 5
- Add support for OpenSSH user configuration files HOT 2
- nada
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ssh-audit.