On Tue, 1 Apr 2008, Blake wrote:

>I guess I'm not sure where to set RekeyLimit.  /etc/ssh/sshd_config ?

        no, it's a client side option.

        ssh -o RekeyLimit=3900K ...

        or

        put it to ~/.ssh/config

>
>thanks,
>Blake
>
>On Tue, Apr 1, 2008 at 11:03 AM, Jan Pechanec <Jan.Pechanec at sun.com> wrote:
>
>> On Tue, 1 Apr 2008, Jan Pechanec wrote:
>>
>> >>Are there any workarounds possible?  Debug output from ssh is below:
>> >
>> >       for default crypto (aes), set RekeyLimit to 3.9m on client side,
>> >that should be enough. If not, please let me know. The fix should go to
>> >snv_88.
>>
>>         sorry, the right setting is RekeyLimit=3900K
>>
>>        for rc4, 3des and blowfish it should be RekeyLimit=950K
>>
>> --
>> Jan Pechanec
>>
>

-- 
Jan Pechanec

Reply via email to