Merging upstream version 4.23.0.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 185 insertions, 96 deletions

diff --git a/templates/man5/sshd_config.5.pot b/templates/man5/sshd_config.5.pot
index 8544c334..35de920c 100644
--- a/templates/man5/sshd_config.5.pot
+++ b/templates/man5/sshd_config.5.pot
@@ -7,7 +7,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2024-03-01 17:08+0100\n"
+"POT-Creation-Date: 2024-05-01 15:54+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,9 +17,9 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 
 #. type: Dd
-#: archlinux debian-unstable fedora-40 fedora-rawhide opensuse-tumbleweed
+#: archlinux debian-unstable
 #, no-wrap
-msgid "$Mdocdate: July 28 2023 $"
+msgid "$Mdocdate: February 21 2024 $"
 msgstr ""
 
 #. type: Dt
@@ -480,14 +480,14 @@ msgid "Cm CASignatureAlgorithms"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid ""
 "Specifies which algorithms are allowed for signing of certificates by "
 "certificate authorities (CAs).  The default is:"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 #, no-wrap
 msgid ""
 "ssh-ed25519,ecdsa-sha2-nistp256,\n"
@@ -498,7 +498,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid ""
 "If the specified list begins with a E<.Sq +> character, then the specified "
 "algorithms will be appended to the default set instead of replacing them.  "
@@ -523,29 +523,36 @@ msgid "Cm ChannelTimeout"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
+#: archlinux debian-unstable
 msgid ""
 "Specifies whether and how quickly E<.Xr sshd 8> should close inactive "
 "channels.  Timeouts are specified as one or more E<.Dq type=interval> pairs "
-"separated by whitespace, where the E<.Dq type> must be a channel type name "
-"(as described in the table below), optionally containing wildcard characters."
+"separated by whitespace, where the E<.Dq type> must be the special keyword "
+"E<.Dq global> or a channel type name from the list below, optionally "
+"containing wildcard characters."
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
+#: archlinux debian-unstable
 msgid ""
 "The timeout value E<.Dq interval> is specified in seconds or may use any of "
 "the units documented in the E<.Sx TIME FORMATS> section.  For example, E<.Dq "
-"session:*=5m> would cause all sessions to terminate after five minutes of "
-"inactivity.  Specifying a zero value disables the inactivity timeout."
+"session=5m> would cause interactive sessions to terminate after five minutes "
+"of inactivity.  Specifying a zero value disables the inactivity timeout."
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
-msgid "The available channel types include:"
+#: archlinux debian-unstable
+msgid ""
+"The special timeout E<.Dq global> applies to all active channels, taken "
+"together.  Traffic on any active channel will reset the timeout, but when "
+"the timeout expires then all open channels will be closed.  Note that this "
+"global timeout is not matched by wildcards and must be specified explicitly."
+msgstr ""
+
+#. type: Plain text
+#: archlinux debian-unstable
+msgid "The available channel type names include:"
 msgstr ""
 
 #. type: It
@@ -594,44 +601,27 @@ msgid ""
 msgstr ""
 
 #. type: It
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
-#, no-wrap
-msgid "Cm session:command"
-msgstr ""
-
-#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
-msgid "Command execution sessions."
-msgstr ""
-
-#. type: It
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
+#: archlinux debian-unstable
 #, no-wrap
-msgid "Cm session:shell"
+msgid "Cm session"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
-msgid "Interactive shell sessions."
+#: archlinux debian-unstable
+msgid ""
+"The interactive main session, including shell session, command execution, E<."
+"Xr scp 1>, E<.Xr sftp 1>, etc."
 msgstr ""
 
 #. type: It
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
+#: archlinux debian-unstable
 #, no-wrap
-msgid "Cm session:subsystem:..."
+msgid "Cm tun-connection"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
-msgid ""
-"Subsystem sessions, e.g. for E<.Xr sftp 1>, which could be identified as E<."
-"Cm session:subsystem:sftp>."
+#: archlinux debian-unstable
+msgid "Open E<.Cm TunnelForward> connections."
 msgstr ""
 
 #. type: It
@@ -657,15 +647,13 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
+#: archlinux debian-unstable
 msgid ""
 "Moreover, terminating an inactive channel or session does not necessarily "
 "close the SSH connection, nor does it prevent a client from requesting "
 "another channel of the same type.  In particular, expiring an inactive "
 "forwarding session does not prevent another identical forwarding from being "
-"subsequently created.  See also E<.Cm UnusedConnectionTimeout>, which may be "
-"used in conjunction with this option."
+"subsequently created."
 msgstr ""
 
 #. type: Plain text
@@ -682,15 +670,14 @@ msgid "Cm ChrootDirectory"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
+#: archlinux debian-unstable
 msgid ""
 "Specifies the pathname of a directory to E<.Xr chroot 2> to after "
 "authentication.  At session startup E<.Xr sshd 8> checks that all components "
-"of the pathname are root-owned directories which are not writable by any "
-"other user or group.  After the chroot, E<.Xr sshd 8> changes the working "
-"directory to the user's home directory.  Arguments to E<.Cm ChrootDirectory> "
-"accept the tokens described in the E<.Sx TOKENS> section."
+"of the pathname are root-owned directories which are not writable by group "
+"or others.  After the chroot, E<.Xr sshd 8> changes the working directory to "
+"the user's home directory.  Arguments to E<.Cm ChrootDirectory> accept the "
+"tokens described in the E<.Sx TOKENS> section."
 msgstr ""
 
 #. type: Plain text
@@ -732,7 +719,7 @@ msgid "Cm Ciphers"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid ""
 "Specifies the ciphers allowed.  Multiple ciphers must be comma-separated.  "
 "If the specified list begins with a E<.Sq +> character, then the specified "
@@ -810,12 +797,12 @@ msgid "chacha20-poly1305@openssh.com"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid "The default is:"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 #, no-wrap
 msgid ""
 "chacha20-poly1305@openssh.com,\n"
@@ -1088,7 +1075,6 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-bookworm debian-unstable mageia-cauldron
-#: opensuse-tumbleweed
 msgid ""
 "Specifies the signature algorithms that will be accepted for hostbased "
 "authentication as a list of comma-separated patterns.  Alternately if the "
@@ -1104,7 +1090,6 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-bookworm debian-unstable mageia-cauldron
-#: opensuse-tumbleweed
 #, no-wrap
 msgid ""
 "ssh-ed25519-cert-v01@openssh.com,\n"
@@ -1242,14 +1227,14 @@ msgid "Cm HostKeyAlgorithms"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid ""
 "Specifies the host key signature algorithms that the server offers.  The "
 "default for this option is:"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid ""
 "The list of available signature algorithms may also be obtained using E<.Qq "
 "ssh -Q HostKeyAlgorithms>."
@@ -1429,7 +1414,7 @@ msgid "Cm KexAlgorithms"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid ""
 "Specifies the available KEX (Key Exchange) algorithms.  Multiple algorithms "
 "must be comma-separated.  Alternately if the specified list begins with a E<."
@@ -1636,10 +1621,9 @@ msgid "Cm LogVerbose"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
+#: archlinux debian-unstable
 msgid ""
-"Specify one or more overrides to LogLevel.  An override consists of a "
+"Specify one or more overrides to E<.Cm LogLevel>.  An override consists of a "
 "pattern lists that matches the source file, function and line number to "
 "force detailed logging for.  For example, an override pattern of:"
 msgstr ""
@@ -1669,7 +1653,7 @@ msgid "Cm MACs"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid ""
 "Specifies the available MAC (message authentication code) algorithms.  The "
 "MAC algorithm is used for data integrity protection.  Multiple algorithms "
@@ -1788,7 +1772,7 @@ msgid "umac-128-etm@openssh.com"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 #, no-wrap
 msgid ""
 "umac-64-etm@openssh.com,umac-128-etm@openssh.com,\n"
@@ -2307,7 +2291,7 @@ msgid "Cm PubkeyAcceptedAlgorithms"
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed
+#: archlinux debian-bookworm debian-unstable
 msgid ""
 "Specifies the signature algorithms that will be accepted for public key "
 "authentication as a list of comma-separated patterns.  Alternately if the "
@@ -2592,12 +2576,14 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-tumbleweed
+#: archlinux debian-unstable
 msgid ""
 "Alternately the name E<.Cm internal-sftp> implements an in-process SFTP "
 "server.  This may simplify configurations using E<.Cm ChrootDirectory> to "
-"force a different filesystem root on clients."
+"force a different filesystem root on clients.  It accepts the same command "
+"line arguments as E<.Cm sftp-server> and even though it is in-process, "
+"settings such as E<.Cm LogLevel> or E<.Cm SyslogFacility> do not apply to it "
+"and must be set explicitly via command line arguments."
 msgstr ""
 
 #. type: Plain text
@@ -3292,7 +3278,6 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-bookworm debian-unstable mageia-cauldron
-#: opensuse-tumbleweed
 msgid "E<.Xr sftp-server 8>, E<.Xr sshd 8>"
 msgstr ""
 
@@ -3389,6 +3374,86 @@ msgstr ""
 msgid "See PATTERNS in E<.Xr ssh_config 5> for more information on patterns."
 msgstr ""
 
+#. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Specifies whether and how quickly E<.Xr sshd 8> should close inactive "
+"channels.  Timeouts are specified as one or more E<.Dq type=interval> pairs "
+"separated by whitespace, where the E<.Dq type> must be a channel type name "
+"(as described in the table below), optionally containing wildcard characters."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"The timeout value E<.Dq interval> is specified in seconds or may use any of "
+"the units documented in the E<.Sx TIME FORMATS> section.  For example, E<.Dq "
+"session:*=5m> would cause all sessions to terminate after five minutes of "
+"inactivity.  Specifying a zero value disables the inactivity timeout."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid "The available channel types include:"
+msgstr ""
+
+#. type: It
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+#, no-wrap
+msgid "Cm session:command"
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid "Command execution sessions."
+msgstr ""
+
+#. type: It
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+#, no-wrap
+msgid "Cm session:shell"
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid "Interactive shell sessions."
+msgstr ""
+
+#. type: It
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+#, no-wrap
+msgid "Cm session:subsystem:..."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Subsystem sessions, e.g. for E<.Xr sftp 1>, which could be identified as E<."
+"Cm session:subsystem:sftp>."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Moreover, terminating an inactive channel or session does not necessarily "
+"close the SSH connection, nor does it prevent a client from requesting "
+"another channel of the same type.  In particular, expiring an inactive "
+"forwarding session does not prevent another identical forwarding from being "
+"subsequently created.  See also E<.Cm UnusedConnectionTimeout>, which may be "
+"used in conjunction with this option."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Specifies the pathname of a directory to E<.Xr chroot 2> to after "
+"authentication.  At session startup E<.Xr sshd 8> checks that all components "
+"of the pathname are root-owned directories which are not writable by any "
+"other user or group.  After the chroot, E<.Xr sshd 8> changes the working "
+"directory to the user's home directory.  Arguments to E<.Cm ChrootDirectory> "
+"accept the tokens described in the E<.Sx TOKENS> section."
+msgstr ""
+
 #. type: It
 #: debian-bookworm debian-unstable
 #, no-wrap
@@ -3458,7 +3523,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: debian-bookworm debian-unstable opensuse-tumbleweed
+#: debian-bookworm debian-unstable
 #, no-wrap
 msgid ""
 "gss-gex-sha1-,\n"
@@ -3534,6 +3599,14 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Specify one or more overrides to LogLevel.  An override consists of a "
+"pattern lists that matches the source file, function and line number to "
+"force detailed logging for.  For example, an override pattern of:"
+msgstr ""
+
+#. type: Plain text
 #: debian-bookworm debian-unstable
 msgid ""
 "The arguments to E<.Cm Match> are one or more criteria-pattern pairs or the "
@@ -3572,6 +3645,14 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
+#: debian-bookworm fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Alternately the name E<.Cm internal-sftp> implements an in-process SFTP "
+"server.  This may simplify configurations using E<.Cm ChrootDirectory> to "
+"force a different filesystem root on clients."
+msgstr ""
+
+#. type: Plain text
 #: debian-bookworm debian-unstable
 msgid "This option was formerly called E<.Cm KeepAlive>."
 msgstr ""
@@ -3590,8 +3671,14 @@ msgid ""
 "%K, %k, %s, %T, %t, %U, and %u."
 msgstr ""
 
+#. type: Dd
+#: fedora-40 fedora-rawhide opensuse-tumbleweed
+#, no-wrap
+msgid "$Mdocdate: July 28 2023 $"
+msgstr ""
+
 #. type: Plain text
-#: fedora-40 fedora-rawhide mageia-cauldron
+#: fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
 msgid ""
 "The default is handled system-wide by E<.Xr crypto-policies 7>.  Information "
 "about defaults, how to modify the defaults and how to customize existing "
@@ -3600,7 +3687,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: fedora-40 fedora-rawhide mageia-cauldron
+#: fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
 msgid ""
 "Specifies which algorithms are allowed for signing of certificates by "
 "certificate authorities (CAs).  If the specified list begins with a E<.Sq +> "
@@ -3611,7 +3698,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: fedora-40 fedora-rawhide mageia-cauldron
+#: fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
 msgid ""
 "Specifies the ciphers allowed.  Multiple ciphers must be comma-separated.  "
 "If the specified list begins with a E<.Sq +> character, then the specified "
@@ -3638,7 +3725,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: fedora-40 fedora-rawhide mageia-cauldron
+#: fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
 #, no-wrap
 msgid ""
 "gss-gex-sha1-\n"
@@ -3671,7 +3758,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: fedora-40 fedora-rawhide mageia-cauldron
+#: fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
 msgid ""
 "Specifies the host key signature algorithms that the server offers.  The "
 "default for this option is: The list of available signature algorithms may "
@@ -3708,7 +3795,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: fedora-40 fedora-rawhide mageia-cauldron
+#: fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
 msgid ""
 "Specifies the available KEX (Key Exchange) algorithms.  Multiple algorithms "
 "must be comma-separated.  Alternately if the specified list begins with a E<."
@@ -3722,7 +3809,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: fedora-40 fedora-rawhide mageia-cauldron
+#: fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
 msgid ""
 "Specifies the available MAC (message authentication code) algorithms.  The "
 "MAC algorithm is used for data integrity protection.  Multiple algorithms "
@@ -3774,7 +3861,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: fedora-40 fedora-rawhide mageia-cauldron
+#: fedora-40 fedora-rawhide mageia-cauldron opensuse-tumbleweed
 msgid ""
 "Specifies the signature algorithms that will be accepted for public key "
 "authentication as a list of comma-separated patterns.  Alternately if the "
@@ -3810,7 +3897,7 @@ msgid ""
 msgstr ""
 
 #. type: Plain text
-#: fedora-40 fedora-rawhide
+#: fedora-40 fedora-rawhide opensuse-tumbleweed
 msgid ""
 "E<.Xr sftp-server 8>, E<.Xr sshd 8>, E<.Xr crypto-policies 7>, E<.Xr update-"
 "crypto-policies 8>"
@@ -3842,8 +3929,22 @@ msgstr ""
 #. type: Plain text
 #: opensuse-tumbleweed
 msgid ""
-"The default is E<.Dq gss-gex-sha1-,gss-group14-sha1->.  This option only "
-"applies to protocol version 2 connections using GSSAPI."
+"This option only applies to protocol version 2 connections using GSSAPI."
+msgstr ""
+
+#. type: Plain text
+#: opensuse-tumbleweed
+msgid ""
+"Specifies the signature algorithms that will be accepted for hostbased "
+"authentication as a list of comma-separated patterns.  Alternately if the "
+"specified list begins with a E<.Sq +> character, then the specified "
+"signature algorithms will be appended to the built-in openssh set instead of "
+"replacing them.  If the specified list begins with a E<.Sq -> character, "
+"then the specified signature algorithms (including wildcards)  will be "
+"removed from the built-in openssh set instead of replacing them.  If the "
+"specified list begins with a E<.Sq ^> character, then the specified "
+"signature algorithms will be placed at the head of the built-in openssh "
+"default set."
 msgstr ""
 
 #. type: Plain text
@@ -3864,18 +3965,6 @@ msgid ""
 "no>.  E<.Cm ChallengeResponseAuthentication> is a deprecated alias for this."
 msgstr ""
 
-#. type: Plain text
-#: opensuse-tumbleweed
-#, no-wrap
-msgid ""
-"sntrup761x25519-sha512@openssh.com,\n"
-"curve25519-sha256,curve25519-sha256@libssh.org,\n"
-"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,\n"
-"diffie-hellman-group-exchange-sha256,\n"
-"diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,\n"
-"diffie-hellman-group14-sha256,diffie-hellman-group14-sha1\n"
-msgstr ""
-
 #. type: It
 #: opensuse-tumbleweed
 #, no-wrap