diff options
| author | Joseph Reynolds <jrey@us.ibm.com> | 2018-10-09 22:53:15 +0300 |
|---|---|---|
| committer | Brad Bishop <bradleyb@fuzziesquirrel.com> | 2018-10-31 14:33:21 +0300 |
| commit | 1597b9231e2cdd8860317a94dd1b2118cc36da60 (patch) | |
| tree | 549397433dc8c40dc6960d1bdbf32bb7c197f9d7 /meta-ibm/recipes-phosphor/dbus | |
| parent | 8c01c500cdfb3b71294e1b6eea60c0d9dbb8124c (diff) | |
| download | openbmc-1597b9231e2cdd8860317a94dd1b2118cc36da60.tar.xz | |
Dropbear SSH remove HMAC-MD5
The Dropbear SSH client and server configuration is changed to not
accept the HMAC-MD5 algorithm when making connections.
The MD5 algorithm is no longer considered secure.
With this change, Dropbear supports the following MAC algorithms:
SHA1_HMAC, SHA2_256_HMAC, and SHA2_512_HMAC.
Note that Dropbear does not yet support HMAC-SHA3.
Tested:
$ ssh -m hmac-sha1-96 root@${bmc}
Unable to negotiate with ${bmc} port 22:
no matching MAC found.
Their offer: hmac-sha1,hmac-sha2-256,hmac-sha2-512
$ ssh root@${bmc} # worked
(From meta-phosphor rev: ec86af05553a7a66af68356cb2b4ec451d5bbf91)
Change-Id: Iba30c9f1ea66e2c72c75d16a16194ede808fe64a
Signed-off-by: Joseph Reynolds <jrey@us.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Diffstat (limited to 'meta-ibm/recipes-phosphor/dbus')
0 files changed, 0 insertions, 0 deletions