Date: Fri, 22 Jan 2016 14:00:43 -0800 From: Bryan Drewery <bdrewery@FreeBSD.org> To: =?UTF-8?Q?Dag-Erling_Sm=c3=b8rgrav?= <des@des.no> Cc: Conrad Meyer <cem@FreeBSD.org>, src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r294495 - in head: . crypto/openssh Message-ID: <56A2A68B.70900@FreeBSD.org> In-Reply-To: <868u3he0rj.fsf@desk.des.no> References: <201601211110.u0LBAEI1081858@repo.freebsd.org> <CAG6CVpXXadnEJt%2B=tjiyhpk04LtTeiAoOqYeTn2-bsxwJjmTAw@mail.gmail.com> <86r3hauf88.fsf@desk.des.no> <56A2A27A.2020801@FreeBSD.org> <868u3he0rj.fsf@desk.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --bGVrLOahvgrOn8EnUupSsxSujDus58j3s Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 1/22/2016 1:56 PM, Dag-Erling Sm=C3=B8rgrav wrote: > Bryan Drewery <bdrewery@FreeBSD.org> writes: >> I've used these in sshd_config and ssh_config to restore some removed >> functionality: >> >> Ciphers +blowfish-cbc,arcfour,aes128-cbc,3des-cbc >> KexAlgorithms +diffie-hellman-group1-sha1 >=20 > Do you actually need these? Do you know of any clients or servers whic= h > do not support any of the other ciphers and key exchange algorithms > which OpenSSH offers? >=20 >> PubkeyAcceptedKeyTypes +ssh-dss,ssh-dss-cert-v01@openssh.com >> HostkeyAlgorithms +ssh-dss,ssh-dss-cert-v01@openssh.com >=20 > These are already enabled. >=20 Right. I was suggesting an alternative method to modifying these upstream files and providing deprecated and potentially insecure functionality by default. --=20 Regards, Bryan Drewery --bGVrLOahvgrOn8EnUupSsxSujDus58j3s Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJWoqaLAAoJEDXXcbtuRpfPnkEH/iiYHwsg9rBO1t2d1no984Hu um0te/73HAmu33oCwEnbRLodqjuKu1h9i2kcP8p33FkW9bpNefPHLQdBYeYEnNgS e61HrGmW3m4I4Mhx8dFofIwdZ0JOQcPhaPLovkxxx6DeoiLT9Rkq5z29JXlX8IxO 2qfmodcqOkJBKQPM16wAABeu3lm6cfw8IQ9NpgoarLT4QbQ8Kb9iFZjvOWKZ8C94 v2ZR1SIjbrkyByXflYrvpRTg0Ry5FYti0xuvZ/AfjF2BmzBOIRyESAOF953wUJZ+ aiYdLevIIrrdAG9fM8yQASrJbsIhQjSfi35atn1C8UqAlcsgpl+vZLeMeOUEmHk= =PUyO -----END PGP SIGNATURE----- --bGVrLOahvgrOn8EnUupSsxSujDus58j3s--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?56A2A68B.70900>