Re: Enable strong KexAlgorithms, Ciphers and MACs in /etc/ssh/sshd_config file on RHEL 8.x Linux OS
Mike Burger <[email protected]> Thu, 25 Jan 2024 14:23:00 +0000
| Newsgroups | gmane.linux.redhat.general |
|---|---|
| Message-ID | <0100018d4100adcf-a118d81d-cbb4-403a-bc36-d2e171c047a2-000000@email.amazonses.com> |
--=_6bd7b4f6fae67b6f4d5500646925732d Content-Type: text/plain; charset="UTF-8"; format=flowed Hello, Kaushal. The first item in this Google search [1] is Red Hat's blog entry [2] on the matter. On 2024-01-25 08:10, Kaushal Shriyan wrote: > Hi, > > I am running the below servers on Red Hat Enterprise Linux release 8.7 > (Ootpa). The details are as follows. > > # rpm -qa | grep openssh > openssh-8.0p1-16.el8.x86_64 > openssh-askpass-8.0p1-16.el8.x86_64 > openssh-server-8.0p1-16.el8.x86_64 > openssh-clients-8.0p1-16.el8.x86_64 > > # cat /etc/redhat-release > Red Hat Enterprise Linux release 8.7 (Ootpa) > # > > How do I enable strong KexAlgorithms, Ciphers and MACs in > /etc/ssh/sshd_config file as per the above ssh server version. For > example as per below setting. > > KexAlgorithms > ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256 > Ciphers > [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr > MACs > [email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,[email protected] > > Please guide me. > > Thanks in advance. > > Best Regards, > > Kaushal > > -- > You received this message because you are subscribed to the Google > Groups "[email protected]" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. -- [3] "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 Links: ------ [1] https://www.google.com/search?q=Manage+ssh+ciphers+in+rhel+8&oq=Manage+ssh+ciphers+in+rhel+8 [2] https://www.redhat.com/en/blog/configuring-rhel-8-compliance-crypto-policy-related-cipher-block-chaining [3] https://poplme.co/hash/lqQkxj0F/1/es -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. --=_6bd7b4f6fae67b6f4d5500646925732d Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="UTF-8" <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset= =3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen= eva,sans-serif'> <p id=3D"reply-intro">Hello, Kaushal.</p> <p>The first item in <a href=3D"https://www.google.com/search?q=3DManage+ss= h+ciphers+in+rhel+8&oq=3DManage+ssh+ciphers+in+rhel+8">this Google sear= ch</a> is <a href=3D"https://www.redhat.com/en/blog/configuring-rhel-8-comp= liance-crypto-policy-related-cipher-block-chaining">Red Hat's blog entry</a= > on the matter.</p> <p>On 2024-01-25 08:10, Kaushal Shriyan wrote:</p> <blockquote type=3D"cite" style=3D"padding: 0 0.4em; border-left: #1010ff 2= px solid; margin: 0"> <div id=3D"replybody1"> <div dir=3D"ltr"> <div>Hi,</div> <div> </div> <div>I am running the below servers on Red Hat Enterprise Linux releas= e 8.7 (Ootpa). The details are as follows. </div> <div> </div> <div># rpm -qa | grep openssh<br />openssh-8.0p1-16.el8.x86_64<br />openssh= -askpass-8.0p1-16.el8.x86_64<br />openssh-server-8.0p1-16.el8.x86_64<br />o= penssh-clients-8.0p1-16.el8.x86_64<br /><br /></div> <div># cat /etc/redhat-release<br />Red Hat Enterprise Linux release 8.7 (O= otpa)<br />#</div> <div> </div> <div>How do I enable strong KexAlgorithms, Ciphers and MACs in /e= tc/ssh/sshd_config file as per the above ssh server version. For example as= per below setting. </div> <div> </div> <div>KexAlgorithms ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256= ,diffie-hellman-group-exchange-sha256<br />Ciphers <a href=3D"mailto:c= [email protected]" rel=3D"noreferrer">chacha20-poly1305@openssh.= com</a>,<a href=3D"mailto:[email protected]" rel=3D"noreferrer">aes256= [email protected]</a>,<a href=3D"mailto:[email protected]" rel=3D"noref= errer">[email protected]</a>,aes256-ctr,aes192-ctr,aes128-ctr<br />MAC= s <a href=3D"mailto:[email protected]" rel=3D"noreferrer">= [email protected]</a>,<a href=3D"mailto:hmac-sha2-256-etm@opens= sh.com" rel=3D"noreferrer">[email protected]</a>,<a href=3D"mai= lto:[email protected]" rel=3D"noreferrer">[email protected]</= a>,hmac-sha2-512,hmac-sha2-256,<a href=3D"mailto:[email protected]" rel= =3D"noreferrer">[email protected]</a></div> <div> </div> <div> <div>Please guide me.</div> <div> </div> <div>Thanks in advance.</div> <div> </div> <div>Best Regards,</div> <div> </div> <div>Kaushal</div> </div> </div> <p><br /></p> -- <br />You received this message because you are subscribed to the Google= Groups "[email protected]" group.<br />To unsubscribe from this group= and stop receiving emails from it, send an email to <a href=3D"mailto:redh= [email protected]" rel=3D"noreferrer">redhat-list+unsubscribe@= redhat.com</a>.</div> </blockquote> <p><br /></p> <div id=3D"signature"> <div class=3D"pre" style=3D"margin: 0; padding: 0; font-family: monospace">= <span class=3D"sig">-- <br /><a href=3D"https://poplme.co/hash/lqQkxj0= F/1/es"><img id=3D"email-sig-image" src=3D"https://firebasestorage.googleap= is.com/v0/b/poplco.appspot.com/o/signatures%2FYDJ6YD99-signature.png?alt=3D= media" width=3D"411" height=3D"273" /></a><br /><br />"It's always suicide-= mission this, save-the-planet that. No one ever just stops by to say 'hi' a= nymore." --Colonel Jack O'Neill, SG1</span></div> <p><br /></p> </div> </body></html> <p></p> -- <br /> You received this message because you are subscribed to the Google Groups &= quot;[email protected]" group.<br /> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:[email protected]">redhat-list+u= [email protected]</a>.<br /> --=_6bd7b4f6fae67b6f4d5500646925732d--