up vote 1 down vote favorite
share [g+] share [fb]

Do you know how to reject SSH user connecting with weak crypto lik DES?

Thanks/

link|improve this question
0% accept rate
feedback

1 Answer

up vote 4 down vote

Use the Protocol and Ciphers options for sshd to restrict the algorithms the client is allowed to use.

link|improve this answer
"Ciphers" has its own defaults. If clients don't meet my set ciphers, sshd reverts its defaults which are aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128, arcfour256,arcfour,aes192-cbc,aes256-cbc,aes128-ctr, aes192-ctr,aes256-ctr – jack Jul 20 '10 at 9:43
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.