From owner-svn-src-head@freebsd.org Fri Jan 22 22:52:56 2016 Return-Path: Delivered-To: svn-src-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 772B6A8EAED; Fri, 22 Jan 2016 22:52:56 +0000 (UTC) (envelope-from slw@zxy.spb.ru) Received: from zxy.spb.ru (zxy.spb.ru [195.70.199.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 360071C39; Fri, 22 Jan 2016 22:52:56 +0000 (UTC) (envelope-from slw@zxy.spb.ru) Received: from slw by zxy.spb.ru with local (Exim 4.86 (FreeBSD)) (envelope-from ) id 1aMkZX-000EPm-Ma; Sat, 23 Jan 2016 01:52:51 +0300 Date: Sat, 23 Jan 2016 01:52:51 +0300 From: Slawa Olhovchenkov To: Dag-Erling =?utf-8?B?U23DuHJncmF2?= Cc: Bryan Drewery , svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org, Conrad Meyer Subject: Re: svn commit: r294495 - in head: . crypto/openssh Message-ID: <20160122225251.GK37895@zxy.spb.ru> References: <201601211110.u0LBAEI1081858@repo.freebsd.org> <86r3hauf88.fsf@desk.des.no> <56A2A27A.2020801@FreeBSD.org> <868u3he0rj.fsf@desk.des.no> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <868u3he0rj.fsf@desk.des.no> User-Agent: Mutt/1.5.24 (2015-08-30) X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: slw@zxy.spb.ru X-SA-Exim-Scanned: No (on zxy.spb.ru); SAEximRunCond expanded to false X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 22:52:56 -0000 On Fri, Jan 22, 2016 at 10:56:48PM +0100, Dag-Erling Smørgrav wrote: > Bryan Drewery writes: > > I've used these in sshd_config and ssh_config to restore some removed > > functionality: > > > > Ciphers +blowfish-cbc,arcfour,aes128-cbc,3des-cbc > > KexAlgorithms +diffie-hellman-group1-sha1 > > Do you actually need these? Do you know of any clients or servers which > do not support any of the other ciphers and key exchange algorithms > which OpenSSH offers? PIX 515E? ASA w/o K9 license?