[SSHD-1004] Disable weak security settings

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.6.0
• Labels: ssh
• Flags: Important
• Assignee: Lyor Goldstein
• Reporter: Lyor Goldstein
• Created: 27/May/20 19:41
• Updated: 04/Jun/21 18:14
• Resolved: 01/Aug/20 08:14

Description

OpenSSH to deprecate SHA-1 logins due to security risk

Including hmac-md5, hmac-ripemd160 and also ssh-rsa and ssh-dss key exchanges. For the time being we will not include them by default but leave the code in place in case users still need them

Issue Links

• links to: OpenSSH release 8.3
• links to: rfc7465- Prohibiting RC4 Cipher Suites
• links to: rfc8429 - Deprecate Triple-DES (3DES) and RC4 in Kerberos
• links to: rfc8758 - Deprecating RC4 in Secure Shell