Chris Turner <[email protected]> writes: > Encryption options can be selected by the client so long as they are available
Which is the issue. The change to usr.bin/ssh/dh.h was: -#define DH_GRP_MIN 1024 +#define DH_GRP_MIN 2048 So the new DH_GRP_MIN value of 2048 is compiled in. They could try reverting that commit locally and rebuilding. Allan

