Sample Header Ad - 728x90

Weak MAC Algorithm(s) Supported (SSH)

2 votes
1 answer
4357 views
I have this lines in my /etc/ssh/sshd_config file: MACs hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com MACs -umac-64@openssh.com,-umac-128@openssh.com,-hmac-sha1-etm@openssh.com,-umac-64-etm@openssh.com,-umac-128-etm@openssh.com But still can do ssh with ssh -o MACs=hmac-md5-96 user@host Also here is the output of ssh -Q mac: hmac-sha1 hmac-sha1-96 hmac-sha2-256 hmac-sha2-512 hmac-md5 hmac-md5-96 umac-64@openssh.com umac-128@openssh.com hmac-sha1-etm@openssh.com hmac-sha1-96-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-md5-etm@openssh.com hmac-md5-96-etm@openssh.com umac-64-etm@openssh.com umac-128-etm@openssh.com How can I limit it to 256 and 512?
Asked by Shrm (178 rep)
Oct 29, 2023, 06:22 PM
Last activity: Oct 31, 2023, 10:17 PM