MorgenGrauen Zeitung

SSHD Legacy Problem

hardsoftware: Amaryllis (Artikel 20, Fre, 12. Aug 2022, 19:29:25)

Hi,

in den letzten Tagen schlugen bei mir verstaerkt Hilfesuchungen zum Thema
"SSHD key exchange problem" auf. Hier darum die Loesung, die bei mir geholfen
hat:

The change from openssh6 -> openssh7 disabled by default the
diffie-hellman-group1-sha1 key exchange method.

After reading https://www.openssh.com/legacy.html and https://www.howtoforge.c
om/community/threads/enable-diffie-hellman-group1-sha1-on-jessie.70764/#post-3
37033 I came up with the changes I needed to do to the /etc/ssh/sshd_config
file:

#Legacy changes
KexAlgorithms +diffie-hellman-group1-sha1
Ciphers +aes128-cbc

But a more wide legacy set of changes is (taken from https://www.howtoforge.co
m/community/threads/enable-diffie-hellman-group1-sha1-on-jessie.70764/#post-33
7033)

#Legacy changes
KexAlgorithms diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha
2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange
-sha256,diffie-hellman-group14-sha1
Ciphers 3des-cbc,blowfish-cbc,aes128-cbc,aes128-ctr,aes256-ctr

HTH
Ama*