diff options
| author | Christian Breunig <christian@breunig.cc> | 2025-12-14 18:41:08 +0100 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2025-12-14 18:41:08 +0100 |
| commit | 812eea9a3a20afebc20b374a30ceac7f0d87c9b4 (patch) | |
| tree | 6082b0ec115fbaf856a20400c17f0b59c20b80b2 /interface-definitions | |
| parent | 1a753ab95e68c60660d9cd5c7340b5d22a35fafa (diff) | |
| download | vyos-1x-812eea9a3a20afebc20b374a30ceac7f0d87c9b4.tar.gz vyos-1x-812eea9a3a20afebc20b374a30ceac7f0d87c9b4.zip | |
ssh: T8098: remove support for deprecated "rijndael-cbc@lysator.liu.se" cipher
According to an Arch Linux forum discussion, the cipher
rijndael-cbc@lysator.liu.se was removed in OpenSSH 6.7.
References:
- https://bbs.archlinux.org/viewtopic.php?id=188613
- https://www.openssh.org/txt/release-6.7
- https://github.com/openssh/openssh-portable/commit/03e93c753d7c223063a
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/include/version/ssh-version.xml.i | 2 | ||||
| -rw-r--r-- | interface-definitions/service_ssh.xml.in | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/interface-definitions/include/version/ssh-version.xml.i b/interface-definitions/include/version/ssh-version.xml.i index 0f25caf98..05cf431a7 100644 --- a/interface-definitions/include/version/ssh-version.xml.i +++ b/interface-definitions/include/version/ssh-version.xml.i @@ -1,3 +1,3 @@ <!-- include start from include/version/ssh-version.xml.i --> -<syntaxVersion component='ssh' version='2'></syntaxVersion> +<syntaxVersion component='ssh' version='3'></syntaxVersion> <!-- include end --> diff --git a/interface-definitions/service_ssh.xml.in b/interface-definitions/service_ssh.xml.in index c659a7db7..4d10de646 100644 --- a/interface-definitions/service_ssh.xml.in +++ b/interface-definitions/service_ssh.xml.in @@ -41,10 +41,10 @@ <help>Allowed ciphers</help> <completionHelp> <!-- generated by ssh -Q cipher | tr '\n' ' ' as this will not change dynamically --> - <list>3des-cbc aes128-cbc aes192-cbc aes256-cbc rijndael-cbc@lysator.liu.se aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com chacha20-poly1305@openssh.com</list> + <list>3des-cbc aes128-cbc aes192-cbc aes256-cbc aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com chacha20-poly1305@openssh.com</list> </completionHelp> <constraint> - <regex>(3des-cbc|aes128-cbc|aes192-cbc|aes256-cbc|rijndael-cbc@lysator.liu.se|aes128-ctr|aes192-ctr|aes256-ctr|aes128-gcm@openssh.com|aes256-gcm@openssh.com|chacha20-poly1305@openssh.com)</regex> + <regex>(3des-cbc|aes128-cbc|aes192-cbc|aes256-cbc|aes128-ctr|aes192-ctr|aes256-ctr|aes128-gcm@openssh.com|aes256-gcm@openssh.com|chacha20-poly1305@openssh.com)</regex> </constraint> <multi/> </properties> |