[ale] Weird ssh problem

Ron / BCLUG admin at bclug.ca
Tue Feb 4 21:18:33 EST 2025


Ben Coleman via Ale wrote on 2025-02-04 18:09:

> Anyone got any ideas on this?

My suspicion would be incompatible ciphers.

I had to tweak some settings at one point to let in an older client that 
was not able to be updated to latest cryptographic standards.


Some notes from my /etc/sshd_config.d/xxx.conf:

## Use sshd -T to see which key, kex, hmac, cipher protocols are supported:
##  sshd -T |                                   \
##  grep -v gssapi |                        \
##  grep "\(ciphers\|macs\|kexalgorithms\)" \
##  | grep group

## OLD version(s) of `ssh2dos`:
## https://github.com/AnttiTakala/SSH2DOS/
KexAlgorithms=+diffie-hellman-group1-sha1
HostkeyAlgorithms=+ssh-dss,ssh-rsa
Ciphers=+aes128-cbc
MACs=+hmac-sha1



More information about the Ale mailing list