Thanks Todd, Did a fresh install. Added the following line to sshd_config
but then sshd won't come up: KexAlgorithms +diffie-hellman-group1-sha1,
+diffie-hellman-group-exchange-sha1 Dennis Sent: Friday, June 17, 2016 at
7:09 PM
From: "Todd C. Miller" <[email protected]>
To: "Dennis Matthiesen" <[email protected]>
Cc: [email protected]
Subject: Re: sshfs key exchange failsOn Fri, 17 Jun 2016 19:49:44 +0200,
"Dennis Matthiesen" wrote:

> I'm not sure if this a configuration issue or could this be a general
> problem with the 'Diffie-Hellman Group Exchange Request' not being
> processed properly by OpenBSD.
>
> Problem: OpenBSD SSH server isn't responding to the 'Diffie-Hellman
Group
> Exchange Request' with 'Diffie-Hellman Group Exchange Group'. Server is
> sending a FIN ACK instead.

That sounds like a configuration issue. Newer versions of OpenSSH
don't accept these weak key exchange algorithms by default:

diffie-hellman-group1-sha1
diffie-hellman-group-exchange-sha1

You can add them back in /etc/ssh/sshd_config using the KexAlgorithms
setting. See sshd_config(5) for details.

Also see http://www.openssh.com/legacy.html

- todd

Reply via email to