flora-6: add back openssh MACs that got removed #233

Merged

b12f merged 1 commit from infra-openssh-mac-defaults into infra

2023-07-07 12:43:52 +00:00

Author	SHA1	Message	Date
teutat3s	6fd2903516	flora-6: add back openssh MACs that got removed from defaults NixOS default openssh MACs have changed to use "encrypt-then-mac" only. This breaks compatibilty with clients that do not offer these MACs. For compatibility reasons, we add back the old defaults. See: https://github.com/NixOS/nixpkgs/pull/231165 https://blog.stribik.technology/2015/01/04/secure-secure-shell.html https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67	2023-07-07 12:13:57 +02:00

Author

SHA1

Message

Date

teutat3s

6fd2903516

flora-6: add back openssh MACs that got removed

from defaults

NixOS default openssh MACs have changed to use "encrypt-then-mac" only.
This breaks compatibilty with clients that do not offer these MACs. For
compatibility reasons, we add back the old defaults.
See: https://github.com/NixOS/nixpkgs/pull/231165

https://blog.stribik.technology/2015/01/04/secure-secure-shell.html
https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67

2023-07-07 12:13:57 +02:00