Weak MAC Algorithm(s) Supported (SSH)
2
votes
1
answer
4357
views
I have this lines in my /etc/ssh/sshd_config file:
MACs hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
MACs -umac-64@openssh.com,-umac-128@openssh.com,-hmac-sha1-etm@openssh.com,-umac-64-etm@openssh.com,-umac-128-etm@openssh.com
But still can do ssh with
ssh -o MACs=hmac-md5-96 user@host
Also here is the output of ssh -Q mac
:
hmac-sha1
hmac-sha1-96
hmac-sha2-256
hmac-sha2-512
hmac-md5
hmac-md5-96
umac-64@openssh.com
umac-128@openssh.com
hmac-sha1-etm@openssh.com
hmac-sha1-96-etm@openssh.com
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-md5-etm@openssh.com
hmac-md5-96-etm@openssh.com
umac-64-etm@openssh.com
umac-128-etm@openssh.com
How can I limit it to 256 and 512?
Asked by Shrm
(178 rep)
Oct 29, 2023, 06:22 PM
Last activity: Oct 31, 2023, 10:17 PM
Last activity: Oct 31, 2023, 10:17 PM