On 2015-04-03, Stuart Henderson <[email protected]> wrote: >> I run query on localhost this way: >> $ ssh -Q kex localhost > > http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/www/faq/current.html?rev=1.521&content-type=text/html#20140603 > > ssh permits a wider range of ciphers/kex/MACs than sshd does by default.
There is also this: # sshd -T | grep -i kexalgorithms kexalgorithms [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 -- Christian "naddy" Weisgerber [email protected]
