CVSROOT: /cvs
Module name: src
Changes by: dtuc...@cvs.openbsd.org 2025/03/11 01:42:08
Modified files:
regress/usr.bin/ssh: dropbear-kex.sh
Log message:
Check if dbclient supports SHA1 before trying SHA1-based KEX.
Dropbear 2025.87 removed SHA1 support by default, which means
diffie-hellman-group14-sha1 is not available. Unfortunately there isn't a
flag to query supported KEX, so instead check MACs and if it doesn't have
SHA1 methods, assuming SHA1 based KEXes are likewise not available. Spotted
by anton@.
