Re: z/OS 1.12 ssh to LInux
I should have been more clear: The newer linux openssh server *could* support host key algorithms like ssh-rsa, ssh-dsa, but it doesn't have any of those configured. Kirk Wolf Dovetailed Technologies http://dovetail.com On 4/8/21 8:09 AM, Kirk Wolf wrote: The linux server is pretty new (OpenSSH 8.4) and only supports the following host key algorithms: debug2: kex_parse_kexinit: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 an old OpenSSH 5.0 client won't support any of these. Kirk Wolf Dovetailed Technologies http://dovetail.com On 3/25/21 8:07 AM, John McKown wrote: debug2: kex_parse_kexinit: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS 1.12 ssh to LInux
The linux server is pretty new (OpenSSH 8.4) and only supports the following host key algorithms: debug2: kex_parse_kexinit: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 an old OpenSSH 5.0 client won't support any of these. Kirk Wolf Dovetailed Technologies http://dovetail.com On 3/25/21 8:07 AM, John McKown wrote: debug2: kex_parse_kexinit: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS 1.12 ssh to LInux
On Thu, Mar 25, 2021 at 8:18 AM John McKown wrote: > On Thu, Mar 25, 2021 at 8:14 AM Dave Jousma < > 01a0403c5dc1-dmarc-requ...@listserv.ua.edu> wrote: > >> only a guess. But couldnt find an encryption cipher in common? You >> might need to enable less secure ciphers in your linux system? >> > > I think you're right. Now I'm trying to track down how to do that. I need > "ssh for complete idiots". > How is it that just a few minutes after posting a question here, I find the answer on the web??? On FC33, I had to issue the command (as root): update-crypto-policies --set LEGACY and then reboot. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS 1.12 ssh to LInux
On Thu, Mar 25, 2021 at 8:14 AM Dave Jousma < 01a0403c5dc1-dmarc-requ...@listserv.ua.edu> wrote: > only a guess. But couldnt find an encryption cipher in common? You > might need to enable less secure ciphers in your linux system? > I think you're right. Now I'm trying to track down how to do that. I need "ssh for complete idiots". > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OS 1.12 ssh to LInux
only a guess. But couldnt find an encryption cipher in common? You might need to enable less secure ciphers in your linux system? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
