Date: Fri, 27 Jul 2018 20:18:16 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 230092] [gce] Fix sshd: Remove arcfour ciphers on gce Message-ID: <bug-230092-227@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D230092 Bug ID: 230092 Summary: [gce] Fix sshd: Remove arcfour ciphers on gce Product: Base System Version: CURRENT Hardware: amd64 OS: Any Status: New Severity: Affects Some People Priority: --- Component: conf Assignee: bugs@FreeBSD.org Reporter: gustavo.scalet@collabora.com Created attachment 195510 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D195510&action= =3Dedit patch Currently the following error was being raised by sshd on GCE image: /etc/ssh/sshd_config line 125: Bad SSH2 cipher spec 'aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc= '. That happens on OpenSSL v7.6 and upwards (below the relevant part of "Potentially-incompatible changes" section on release notes[1]): ssh(1)/sshd(8): remove support for the arcfour, blowfish and CAST ciphers. Note: The FreeBSD 12 is using the OpenSSL v7.7 and the FreeBSD 11 is using OpenSSL v7.5. [1] https://www.openssh.com/txt/release-7.6 --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-230092-227>