On 04/14/14 16:45, Jérémie Courrèges-Anglas wrote:
> [email protected] (Jérémie Courrèges-Anglas) writes:
>
>> Hi,
>>
>> some time ago sshd(8) got its list of kex/macs/ciphers shrunk. This
>> breaks py-paramiko both on the kex and macs POV.
>>
>> From transport.py:
>> _preferred_ciphers = ( 'aes128-ctr', 'aes256-ctr', 'aes128-cbc',
>> 'blowfish-cbc', 'aes256-cbc', '3des-cbc',
>> 'arcfour128', 'arcfour256' )
>> _preferred_macs = ( 'hmac-sha1', 'hmac-md5', 'hmac-sha1-96',
>> 'hmac-md5-96' )
>> _preferred_keys = ( 'ssh-rsa', 'ssh-dss', 'ecdsa-sha2-nistp256' )
>> _preferred_kex = ( 'diffie-hellman-group1-sha1',
>> 'diffie-hellman-group-exchange-sha1' )
>> _preferred_compression = ( 'none', )
>>
>> You can match this against sshd_config(8).
>>
>> Some upstream tickets:
>> https://github.com/paramiko/paramiko/issues/242
>> https://github.com/paramiko/paramiko/issues/161
>>
>> If you have a github account, please ping them. :)
>>
>> Meanwhile, consumers should be fixed, this includes duplicity for which
>> I have a patch (for another mail).
>
> - change the default from paramiko to pexpect
> - document it
> - remove dep on paramiko
>
> ok?
>
ok for me.
Thanks
Giovanni
