On 14.04.2016 16:44, Patrick M. Hausen wrote: > Hi, all, > > minor problem/annoyance here: > > root@noc:/etc/ssh # ssh [email protected] > Unable to negotiate with 10.4.0.62 port 22: no matching key exchange method > found. Their offer: diffie-hellman-group1-sha1,none > root@noc:/etc/ssh # uname -a > FreeBSD noc.pluspunkthosting.de 10.3-RELEASE FreeBSD 10.3-RELEASE #3: Wed Apr > 13 14:46:57 CEST 2016 > [email protected]:/usr/obj/usr/src/sys/GENERIC amd64 > > Of course I was able to find http://www.openssh.com/legacy.html myself. > > FreeBSD 10.2 uses OpenSSH 6.6.x while 10.3 imported 7.2. > So far so good. > > The recommended method from the document above works on the > command line: > > ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 [email protected] > > But if I add > > KexAlgorithms +diffie-hellman-group1-sha1 > > to /etc/ssh/ssh_config, that does not change anything.
It does change for me. And helps. Make double sure you have added KexAlgorithms to system wide defaults section of ssh_config and not after limiting "Host" directive, or similar. _______________________________________________ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "[email protected]"
