fix SSH Server CBC Mode Ciphers Enabled

ref https://developer.ibm.com/answers/questions/187318/faq-how-do-i-disable-cipher-block-chaining-cbc-mod.html



The default /etc/ssh/sshd_config file may contain lines similar to the ones

add the following lines into the /etc/ssh/sshd_config file.

ref http://blog.ilc.edu.tw/blog/index.php?op=printView&articleId=685685&blogId=25793 
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
MACs hmac-sha1 
 
Restart ssh after you have made the changes.
  systemctl restart sshd


留言

熱門文章