From 1da5910081e3918a53b6f945bcf7cbd705cc475e Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 6 May 2024 03:33:53 +0200 Subject: Setting KexAlgorithms in ssh_config to Curve25519 and Diffie-Hellman. Signed-off-by: Daniel Baumann --- .../progress-linux/0009-ssh_config-KexAlgorithms.patch | 14 ++++++++++++++ debian/patches/series | 1 + 2 files changed, 15 insertions(+) create mode 100644 debian/patches/progress-linux/0009-ssh_config-KexAlgorithms.patch (limited to 'debian') diff --git a/debian/patches/progress-linux/0009-ssh_config-KexAlgorithms.patch b/debian/patches/progress-linux/0009-ssh_config-KexAlgorithms.patch new file mode 100644 index 0000000..5f954f4 --- /dev/null +++ b/debian/patches/progress-linux/0009-ssh_config-KexAlgorithms.patch @@ -0,0 +1,14 @@ +Author: Daniel Baumann +Description: Setting KexAlgorithms in ssh_config to Curve25519 and Diffie-Hellman. + +diff -Naurp openssh.orig/ssh_config openssh/ssh_config +--- openssh.orig/ssh_config ++++ openssh/ssh_config +@@ -42,6 +42,7 @@ Host * + # Protocol 2 + CASignatureAlgorithms ssh-ed25519,rsa-sha2-512,rsa-sha2-256 + Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr ++ KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha256 + # MACs hmac-md5,hmac-sha1,umac-64@openssh.com + # EscapeChar ~ + # Tunnel no diff --git a/debian/patches/series b/debian/patches/series index 0766f88..ac4de57 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -42,3 +42,4 @@ progress-linux/0005-ssh_config-CASignatureAlgorithms.patch progress-linux/0006-ssh_config-Ciphers.patch progress-linux/0007-ssh_config-HostbasedKeyTypes.patch progress-linux/0008-ssh_config-HostKeyAlgorithms.patch +progress-linux/0009-ssh_config-KexAlgorithms.patch -- cgit v1.2.3