Bug#991797: the distributed ssh_config
Frank-Michael Fischer <[email protected]>
| Newsgroups | gmane.linux.debian.devel.ssh |
|---|---|
| Message-ID | <2747814f-b09a-adb1-9174-f3ae16544ba5__41546.8726352387$1627897890$gmane$org@pimail.wbiat.ovh> |
looks like this: *# Site-wide defaults for some commonly used options. * For a comprehensive # list of available options, their meanings and defaults, please see the # ssh_config(5) man page. #Include /etc/ssh/ssh_config.d/*.conf Host * # ForwardAgent no # ForwardX11 no # ForwardX11Trusted yes # PasswordAuthentication yes # HostbasedAuthentication no # GSSAPIAuthentication no # GSSAPIDelegateCredentials no # GSSAPIKeyExchange no # GSSAPITrustDNS no # BatchMode no # CheckHostIP yes # AddressFamily any # ConnectTimeout 0 # StrictHostKeyChecking ask # IdentityFile ~/.ssh/id_rsa # IdentityFile ~/.ssh/id_dsa # IdentityFile ~/.ssh/id_ecdsa # IdentityFile ~/.ssh/id_ed25519 # Port 22 # Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc # MACs hmac-md5,hmac-sha1,[email protected] # EscapeChar ~ # Tunnel no # TunnelDevice any:any # PermitLocalCommand no # VisualHostKey no # ProxyCommand ssh -q -W %h:%p gateway.example.com # RekeyLimit 1G 1h *# UserKnownHostsFile ~/.ssh/known_hosts.d/%k* SendEnv LANG LC_* HashKnownHosts yes GSSAPIAuthentication yes And without changing this default ssh looks into the non-existing directory *~/.ssh/known_hosts.d/%k!* There is another bug in the default settings: Without adding "hmac-sha2-256" this way "MACs hmac-md5,hmac-sha1,hmac-sha2-256,[email protected]" ssh does not connect to any of my own sshd servers on Debian 10, Ubuntu 18.04 and 20.04 and Oracle Linux 8. This change I have to make for this openssh-client on Debian 11 only. This bug needs to be reopened. FMF **