From owner-svn-src-all@freebsd.org Fri Jan 22 21:56:49 2016 Return-Path: Delivered-To: svn-src-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5D1DBA8D845; Fri, 22 Jan 2016 21:56:49 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id 273FA1D30; Fri, 22 Jan 2016 21:56:48 +0000 (UTC) (envelope-from des@des.no) Received: from desk.des.no (smtp.des.no [194.63.250.102]) by smtp.des.no (Postfix) with ESMTP id B49565959; Fri, 22 Jan 2016 21:56:47 +0000 (UTC) Received: by desk.des.no (Postfix, from userid 1001) id 6490B480B3; Fri, 22 Jan 2016 22:56:48 +0100 (CET) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Bryan Drewery Cc: Conrad Meyer , src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r294495 - in head: . crypto/openssh References: <201601211110.u0LBAEI1081858@repo.freebsd.org> <86r3hauf88.fsf@desk.des.no> <56A2A27A.2020801@FreeBSD.org> Date: Fri, 22 Jan 2016 22:56:48 +0100 In-Reply-To: <56A2A27A.2020801@FreeBSD.org> (Bryan Drewery's message of "Fri, 22 Jan 2016 13:43:22 -0800") Message-ID: <868u3he0rj.fsf@desk.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 21:56:49 -0000 Bryan Drewery writes: > I've used these in sshd_config and ssh_config to restore some removed > functionality: > > Ciphers +blowfish-cbc,arcfour,aes128-cbc,3des-cbc > KexAlgorithms +diffie-hellman-group1-sha1 Do you actually need these? Do you know of any clients or servers which do not support any of the other ciphers and key exchange algorithms which OpenSSH offers? > PubkeyAcceptedKeyTypes +ssh-dss,ssh-dss-cert-v01@openssh.com > HostkeyAlgorithms +ssh-dss,ssh-dss-cert-v01@openssh.com These are already enabled. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no