Differences between revisions 2 and 3
⇤ ← Revision 2 as of 2021-02-15 23:41:50 →
Size: 745
Editor: PieterSmit
Comment:
← Revision 3 as of 2021-02-16 00:05:19 → ⇥
Size: 780
Editor: PieterSmit
Comment:
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
Links [[Linux/AddSshUserKeyOnly]] , [[Cisco/SshLogin]] Links [[Linux/AddSshUserKeyOnly]] , [[Cisco/SshLogin]] , [[/Linux/Security/LoginHistory]]

ssh

Links Linux/AddSshUserKeyOnly , Cisco/SshLogin , /Linux/Security/LoginHistory

ssh to old servers with unsecure ciphers

  • error received 

    Unable to negotiate with 10.10.10.1 port 22: no matching cipher found. Their offer: aes256-cbc,aes128-cbc,3des-cbc

  • Set key exchange 

    ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 user@legacyhost
# or in config
    KexAlgorithms +diffie-hellman-group1-sha1

List supported settings

  • add -G to command line to see active setting

  • for available settings 

    ssh -Q cipher       # List supported ciphers
ssh -Q mac          # List supported MACs
ssh -Q key          # List supported public key types
ssh -Q kex          # List supported key exchange algorithms

ssh (last edited 2024-01-10 21:56:28 by PieterSmit)