post-quantum
Brian Candler
b.candler at pobox.com
Sat Nov 7 19:44:17 AEDT 2026
On 07/11/2026 07:23, Klaus Ethgen wrote:
> Since update, my logs get floated with the following message:
> ... is not using a post-quantum key exchange algorithm: ...
>
> I know that. There is noreason to fload my logs with that. So, how can I
> get rid of that message? I did not find a setting in the config.
See WarnWeakCrypto in both ssh_config(5) and sshd_config(5) man pages.
WarnWeakCrypto
controls whether the user is warned when the cryptographic
algorithms negotiated for the connection are weak or otherwise recommended
against. Warnings may be disabled by turning off a
specific warning or by disabling all warnings. Warnings about
connections that
don't use a post-quantum key exchange may be disabled
using the no-pq-kex flag. no will disable all warnings. The default,
equivalent to yes, is to enable all warnings.
More information about the openssh-unix-dev
mailing list