Removed sha1-based MACs from default config (#706)

This commit is contained in:
Andrew 2023-11-30 18:08:35 -08:00 committed by GitHub
parent cb23f0d9c0
commit 4ee8dc6498
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions

View File

@ -63,6 +63,17 @@
#define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT
#ifdef WINDOWS
#define KEX_SERVER_MAC \
"umac-64-etm@openssh.com," \
"umac-128-etm@openssh.com," \
"hmac-sha2-256-etm@openssh.com," \
"hmac-sha2-512-etm@openssh.com," \
"umac-64@openssh.com," \
"umac-128@openssh.com," \
"hmac-sha2-256," \
"hmac-sha2-512,"
#else
#define KEX_SERVER_MAC \
"umac-64-etm@openssh.com," \
"umac-128-etm@openssh.com," \
@ -74,6 +85,7 @@
"hmac-sha2-256," \
"hmac-sha2-512," \
"hmac-sha1"
#endif
#define KEX_CLIENT_MAC KEX_SERVER_MAC