diff options
author | djm@openbsd.org <djm@openbsd.org> | 2019-02-23 08:20:43 +0000 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2019-02-24 10:51:46 +1100 |
commit | 9b61130fbd95d196bce81ebeca94a4cb7c0d5ba0 (patch) | |
tree | 3ad20b470660a2193096586ccbf8acf6f580da4a /ssh_config.5 | |
parent | 37638c752041d591371900df820f070037878a2d (diff) |
upstream: openssh-7.9 accidentally reused the server's algorithm lists
in the client for KEX, ciphers and MACs. The ciphers and MACs were identical
between the client and server, but the error accidentially disabled the
diffie-hellman-group-exchange-sha1 KEX method.
This fixes the client code to use the correct method list, but
because nobody complained, it also disables the
diffie-hellman-group-exchange-sha1 KEX method.
Reported by nuxi AT vault24.org via bz#2697; ok dtucker
OpenBSD-Commit-ID: e30c33a23c10fd536fefa120e86af1842e33fd57
Diffstat (limited to 'ssh_config.5')
-rw-r--r-- | ssh_config.5 | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/ssh_config.5 b/ssh_config.5 index db01f130b..087ca0132 100644 --- a/ssh_config.5 +++ b/ssh_config.5 | |||
@@ -33,8 +33,8 @@ | |||
33 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF | 33 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
34 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 34 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
35 | .\" | 35 | .\" |
36 | .\" $OpenBSD: ssh_config.5,v 1.290 2019/02/18 07:02:34 jmc Exp $ | 36 | .\" $OpenBSD: ssh_config.5,v 1.291 2019/02/23 08:20:43 djm Exp $ |
37 | .Dd $Mdocdate: February 18 2019 $ | 37 | .Dd $Mdocdate: February 23 2019 $ |
38 | .Dt SSH_CONFIG 5 | 38 | .Dt SSH_CONFIG 5 |
39 | .Os | 39 | .Os |
40 | .Sh NAME | 40 | .Sh NAME |
@@ -1058,7 +1058,6 @@ ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521, | |||
1058 | diffie-hellman-group-exchange-sha256, | 1058 | diffie-hellman-group-exchange-sha256, |
1059 | diffie-hellman-group16-sha512, | 1059 | diffie-hellman-group16-sha512, |
1060 | diffie-hellman-group18-sha512, | 1060 | diffie-hellman-group18-sha512, |
1061 | diffie-hellman-group-exchange-sha1, | ||
1062 | diffie-hellman-group14-sha256, | 1061 | diffie-hellman-group14-sha256, |
1063 | diffie-hellman-group14-sha1 | 1062 | diffie-hellman-group14-sha1 |
1064 | .Ed | 1063 | .Ed |