[GUACAMOLE-407] Update guacd Docker image to build against more recent dependencies

• Type: Improvement
• Status: Resolved
• Priority: Trivial
• Resolution: Done
• Fix Version/s: 1.0.0
• Component/s: guacd-docker
• Assignee: Mike Jumper
• Reporter: Sven Gottwald
• Created: 07/Oct/17 14:06
• Updated: 06/Apr/18 02:04
• Resolved: 06/Apr/18 02:04

Description

The version of libssh2 within CentOS 7 lacks support for the more-recent versions of SSH key exchange methods and MACs. As the guacamole/guacd Docker image uses CentOS 7, it also lacks this support.

Currently, the following key exchange methods are supported:

• diffie-hellman-group14-sha1
• diffie-hellman-group-exchange-sha1
• diffie-hellman-group1-sha1

and the following MACs are supported:

• hmac-sha1,hmac-sha1-96
• hmac-md5,hmac-md5-96
• hmac-ripemd160
• [e-mail]

More recent libssh2 includes support for SHA2 and curve25519. See https://wiki.mozilla.org/Security/Guidelines/OpenSSH for more information and references.

Issue Links

• is duplicated by: GUACAMOLE-435 SSH handshake failing