[Bug 230092] [gce] Fix sshd: Remove arcfour ciphers on gce

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=230092

            Bug ID: 230092
           Summary: [gce] Fix sshd: Remove arcfour ciphers on gce
           Product: Base System
           Version: CURRENT
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: conf
          Assignee: bugs at FreeBSD.org
          Reporter: gustavo.scalet at collabora.com

Created attachment 195510
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=195510&action=edit
patch

Currently the following error was being raised by sshd on GCE image:
/etc/ssh/sshd_config line 125: Bad SSH2 cipher spec
'aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc'.

That happens on OpenSSL v7.6 and upwards (below the relevant part of
"Potentially-incompatible changes" section on release notes[1]):

ssh(1)/sshd(8): remove support for the arcfour, blowfish and CAST
ciphers.

Note: The FreeBSD 12 is using the OpenSSL v7.7 and the FreeBSD 11 is
using OpenSSL v7.5.

[1] https://www.openssh.com/txt/release-7.6

-- 
You are receiving this mail because:
You are the assignee for the bug.