Upgrade ssh connection / Can't connect on openssh > 7.0
OpenSSH 7.0 defaults to no support for diffie-hellman-group1-sha1 key
exchange.
If we can't edit the config of openssh, we can't use the SSH security feature. Can you upgrade the lib and use one of the default protocol ?
Philippe SOHM
shared this idea
-
Philippe SOHM
commented
it's rly cool tk you
can we have a taste of the new feature of dbforge studio 7 ? -
Philippe SOHM
commented
in my case, with a server on raspberry pi with the raspbian
I tryied to add add at this at the end of /etc/ssh/sshd_config and restart ssh service:Ciphers 3des-cbc,blowfish-cbc,cast128-cbc,arcfour,arcfour128,arcfour256,aes128-cbc,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1It didn't work and I won't recompile openssh
It would be rly interesting to add the support of diffie-hellman-group-exchange-sha256
(legacy protocol is considered as weak)