SamyGO

Posted: **Sat Aug 05, 2017 1:24 pm**

d. h. group1 sha1 is meanwhile been disabled by default in openssh.

current options:

SpoilerShow

debug2: local client KEXINIT proposal

debug2: KEX algorithms: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c

debug2: host key algorithms: ssh-rsa-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-dss

how to update our ssh service?

Posted: **Sun Aug 06, 2017 7:31 am**

you can recompile it from fresh sources (https://www.openssh.com/ftp.html) with all features you want enabled. Just i think you have to use some extra libs to be updated though, as openssh comes together with Zlib and OpenSSL.

Posted: **Sun Aug 06, 2017 8:07 am**

thanks, for your answer.
i was kind of hoping somone already done that, i dont have a ready to go toolchain at hand and no experience in compiling stuff/ how to determine wich libs/kernel images to include etc.

my current workaround is

Code: Select all

ssh -o KexAlgorithms=+diffie-hellman-group1-sha1 root@SamyC6500

SamyGO

ssh key exchange method

ssh key exchange method

Re: ssh key exchange method

Re: ssh key exchange method