Commit cad532c7 authored by Maciej Delmanowski's avatar Maciej Delmanowski

Merge branch 'drybjed-sshd-new-MACs'

parents 0080ea0a ecfe618d
Pipeline #19350406 passed with stages
in 8 minutes and 20 seconds
......@@ -425,6 +425,12 @@ sshd__kex_algorithms_additional: []
# to weaker. Newer version supersedes older version.
sshd__macs_map:
# It seems that the SSH in Debian Buster/Sid has issues with
# 'umac-128@openssh.com' MAC algorithm, unfortunately I wasn't able to find any
# sources for the reason why. See: https://github.com/debops/debops/issues/238
'7.6': [ 'hmac-sha2-512-etm@openssh.com', 'hmac-sha2-256-etm@openssh.com',
'umac-128-etm@openssh.com', 'hmac-sha2-512', 'hmac-sha2-256' ]
# Source: https://wiki.mozilla.org/Security/Guidelines/OpenSSH
'6.5': [ 'hmac-sha2-512-etm@openssh.com', 'hmac-sha2-256-etm@openssh.com',
'umac-128-etm@openssh.com', 'hmac-sha2-512', 'hmac-sha2-256',
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment