chore(sshd): exclude deprecated SSHv2 key exchange algorithms

teamhephy · Dec 6, 2019 · cf9c333 · cf9c333
1 parent 5fe6b14
commit cf9c333
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/rootfs/etc/ssh/sshd_config b/rootfs/etc/ssh/sshd_config
@@ -26,3 +26,6 @@ TCPKeepAlive yes
 #AcceptEnv LANG LC_*
 Subsystem sftp /usr/lib/openssh/sftp-server
 UseDNS no
+Ciphers aes128-cbc,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],[email protected]
+Kexalgorithms diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,[email protected],gss-gex-sha1-,gss-group1-sha1-,gss-group14-sha1-
+MACs [email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,[email protected]