Attachment 195510 Details for Bug 230092 – patch

[patch] patch

0001-Fix-sshd-Remove-arcfour-ciphers-on-gce.patch (text/plain), 1.28 KB, created by gustavo.scalet on 2018-07-27 20:18:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: gustavo.scalet

Created: 2018-07-27 20:18:16 UTC

Size: 1.28 KB

patch

obsolete

>From 5bcc66cc71635a30f34a75dd9a0de9acb88986fb Mon Sep 17 00:00:00 2001
>From: Gustavo Serra Scalet <gustavo.scalet@collabora.com>
>Date: Fri, 27 Jul 2018 17:03:58 -0300
>Subject: [PATCH] Fix sshd: Remove arcfour ciphers on gce
>
>Currently the following error was being raised by sshd on GCE image:
>/etc/ssh/sshd_config line 125: Bad SSH2 cipher spec 'aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc'.
>
>That happens on OpenSSL v7.6 and upwards (below the relevant part of
>"Potentially-incompatible changes" section on release notes[1]):
>
>ssh(1)/sshd(8): remove support for the arcfour, blowfish and CAST
>ciphers.
>
>Note: The FreeBSD 12 is using the OpenSSL v7.7 and the FreeBSD 11 is
>using OpenSSL v7.5.
>
>[1] https://www.openssh.com/txt/release-7.6
>---
> release/tools/gce.conf | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
>diff --git a/release/tools/gce.conf b/release/tools/gce.conf
>index 1ae830ce7..903120379 100644
>--- a/release/tools/gce.conf
>+++ b/release/tools/gce.conf
>@@ -66,7 +66,7 @@ EOF
> ChallengeResponseAuthentication no
> X11Forwarding no
> AcceptEnv LANG
>-Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc
>+Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc
> AllowAgentForwarding no
> ClientAliveInterval 420
> EOF
>-- 
>2.17.1
>

Actions: View | Diff

Attachments on bug 230092: 195510 | 195511