[Bug 3184] Unable to add deprecated KexAlgorithms back for host via config file

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sat Jun 20 03:41:11 AEST 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=3184

--- Comment #4 from Nathan Neulinger <nneul at neulinger.org> ---
AH, I think I now understand what the problem is with what I was doing.

The KexAlgorithms config setting in config file ONLY WORKS ONCE.

i.e. you cannot do:

KexAlgorithms +diffie-hellman-group1-sha1
KexAlgorithms +diffie-hellman-group-exchange-sha1

but when specified via command line, it appears to allow another
override (or it's being processed first). 

Above snippet results in it listing group1-sha1, but NOT the
group-exchange-sha1. 


Is that "one shot" expected? It sure doesn't appear that way from
documentation.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list