Patch: Ciphers, MACs and KexAlgorithms on Match

[Darren Tucker]

On Sat, Jun 7, 2014 at 7:23 PM, Damien Miller <djm at mindrot.org> wrote:

> On Fri, 6 Jun 2014, Armin Wolfermann wrote:
>
> [...]
> Unfortunately, this a a bit confusing - some Match criteria only work
> after key exchange has completed. If users try something like
>
> Match user djm
>         Ciphers aes128-cbc
>
> then it will never work.


Actually in this particular case you could probably force a rekeying as
soon as the username is received and make this work more or less as
expected.  That'd work for Compression too.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.