https://bugzilla.mindrot.org/show_bug.cgi?id=2527

            Bug ID: 2527
           Summary: default algorithms mismatch between man pages and
                    myproposal.h
           Product: Portable OpenSSH
           Version: 7.1p1
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: P5
         Component: Documentation
          Assignee: [email protected]
          Reporter: [email protected]

DEFAULT ALGORITHMs in man pages of ssh_config(5) and sshd_config(5)
differ with what openssh actually take.

NOTE: the following diff-style sections have the last algorithm ends
with ",". It's only for getting pretty diff result.

KEX_SERVER_MAC: sshd_config(5) didn't tell me [email protected]
and hman-sha1 is taken by default.

  --- DOCUMENT_SERVER_MAC
  +++ CODE_SERVER_MAC

   [email protected],
   [email protected],
   [email protected],
   [email protected],
  [email protected],
   [email protected],
   [email protected],
   hmac-sha2-256,
   hmac-sha2-512,
  +hmac-sha1,

KEX_CLIENT_ENCRYPT: [email protected] is missing in
ssh_config(5).

  --- DOCUMENT_CLIENT_ENCRYPT
  +++ CODE_CLIENT_ENCRYPT

   [email protected],
   aes128-ctr,
   aes192-ctr,
   aes256-ctr,
   [email protected],
   [email protected],
   arcfour256,
   arcfour128,
   aes128-cbc,
   3des-cbc,
   blowfish-cbc,
   cast128-cbc,
   aes192-cbc,
   aes256-cbc,
   arcfour,
  [email protected],

KEX_CLIENT_MAC: hmac-sha1 series has higher priority than them in
ssh_config(5), and [email protected] is removed. (Probably
it's just an alias to hmac-ripemd160?)

  --- DOCUMENT_CLIENT_MAC
  +++ CODE_CLIENT_MAC

   [email protected],
   [email protected],
   [email protected],
   [email protected],
   [email protected],
   [email protected],
   [email protected],
   hmac-sha2-256,
   hmac-sha2-512,
   +hmac-sha1,
   [email protected],
   [email protected],
   [email protected],
   [email protected],
   [email protected],
   hmac-md5,
   -hmac-sha1,
   hmac-ripemd160,
   [email protected],
   hmac-sha1-96,
   hmac-md5-96,

P.S.: KEX_SERVER_KEX, KEX_CLIENT_KEX, KEX_DEFAULT_PK_ALG,
KEX_SERVER_ENCRYPT are correct.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to