enable strong KexAlgorithms, Ciphers and MACs in /etc/ssh/sshd_config file on RHEL 8.x Linux OS

Kaushal Shriyan kaushalshriyan at gmail.com
Fri Jan 26 00:09:35 AEDT 2024


Hi,

I am running the below servers on Red Hat Enterprise Linux release 8.7
(Ootpa). The details are as follows.

# rpm -qa | grep openssh
openssh-8.0p1-16.el8.x86_64
openssh-askpass-8.0p1-16.el8.x86_64
openssh-server-8.0p1-16.el8.x86_64
openssh-clients-8.0p1-16.el8.x86_64

# cat /etc/redhat-release
Red Hat Enterprise Linux release 8.7 (Ootpa)
#

How do I enable strong KexAlgorithms, Ciphers and MACs in
/etc/ssh/sshd_config file as per the above ssh server version. For example
as per below setting.

KexAlgorithms
ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
Ciphers chacha20-poly1305 at openssh.com,aes256-gcm at openssh.com,
aes128-gcm at openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm at openssh.com,hmac-sha2-256-etm at openssh.com,
umac-128-etm at openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128 at openssh.com

Please guide me.

Thanks in advance.

Best Regards,

Kaushal


More information about the openssh-unix-dev mailing list