Enable strong KexAlgorithms, Ciphers and MACs in /etc/ssh/sshd_config file on RHEL 8.x Linux OS

--000000000000e81e8f060fc4e6a1
Content-Type: text/plain; charset="UTF-8"

Hi,

I am running the below servers on Red Hat Enterprise Linux release 8.7
(Ootpa). The details are as follows.

# rpm -qa | grep openssh
openssh-8.0p1-16.el8.x86_64
openssh-askpass-8.0p1-16.el8.x86_64
openssh-server-8.0p1-16.el8.x86_64
openssh-clients-8.0p1-16.el8.x86_64

# cat /etc/redhat-release
Red Hat Enterprise Linux release 8.7 (Ootpa)
#

How do I enable strong KexAlgorithms, Ciphers and MACs in
/etc/ssh/sshd_config file as per the above ssh server version. For example
as per below setting.

KexAlgorithms
ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
Ciphers [email protected],[email protected],
[email protected],aes256-ctr,aes192-ctr,aes128-ctr
MACs [email protected],[email protected],
[email protected],hmac-sha2-512,hmac-sha2-256,[email protected]

Please guide me.

Thanks in advance.

Best Regards,

Kaushal

-- 
You received this message because you are subscribed to the Google Groups "[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].

--000000000000e81e8f060fc4e6a1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi,</div><div><br></div><div>I am running the below s=
ervers on=C2=A0Red Hat Enterprise Linux release 8.7 (Ootpa). The details ar=
e as follows.=C2=A0</div><div><br></div><div># rpm -qa | grep openssh<br>op=
enssh-8.0p1-16.el8.x86_64<br>openssh-askpass-8.0p1-16.el8.x86_64<br>openssh=
-server-8.0p1-16.el8.x86_64<br>openssh-clients-8.0p1-16.el8.x86_64<br><br><=
/div><div># cat /etc/redhat-release<br>Red Hat Enterprise Linux release 8.7=
 (Ootpa)<br>#<br></div><div><br></div><div>How=C2=A0do I enable strong KexA=
lgorithms, Ciphers and=C2=A0MACs in /etc/ssh/sshd_config file as per the ab=
ove ssh server version. For example as per below setting.=C2=A0</div><div><=
br></div><div>KexAlgorithms ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2=
-nistp256,diffie-hellman-group-exchange-sha256<br>Ciphers=C2=A0<a href=3D"m=
ailto:[email protected]" target=3D"_blank">chacha20-poly1305@op=
enssh.com</a>,<a href=3D"mailto:[email protected]" target=3D"_blank">a=
[email protected]</a>,<a href=3D"mailto:[email protected]" target=
=3D"_blank">[email protected]</a>,aes256-ctr,aes192-ctr,aes128-ctr<br>=
MACs=C2=A0<a href=3D"mailto:[email protected]" target=3D"_blank=
">[email protected]</a>,<a href=3D"mailto:hmac-sha2-256-etm@ope=
nssh.com" target=3D"_blank">[email protected]</a>,<a href=3D"ma=
ilto:[email protected]" target=3D"_blank">[email protected]</=
a>,hmac-sha2-512,hmac-sha2-256,<a href=3D"mailto:[email protected]" targ=
et=3D"_blank">[email protected]</a><br></div><div><br></div><div><div>Pl=
ease guide me.</div><div><br></div><div>Thanks in advance.</div><div><br></=
div><div>Best Regards,</div><div><br></div><div>Kaushal</div></div></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;[email protected]&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">redhat-list+u=
[email protected]</a>.<br />

--000000000000e81e8f060fc4e6a1--