OSX 10.11 KexAlgorithms '+ diffie-hellman-group1-sha1' inválidos

3

Atualizei meu arquivo /etc/ssh/sshd_config com base nas respostas fornecidas aqui - OSX 10.11 habilitar ssh diffie-hellman-group1-sha1
link

# Ciphers and keying   
Ciphers 3des-cbc,blowfish-cbc,cast128-cbc,arcfour,arcfour128,arcfour256,aes128-cbc,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],[email protected]  

#RekeyLimit default none  
KexAlgorithms [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1

E reiniciei o daemeon SSHD usando estes comandos:

sudo launchctl unload  /System/Library/LaunchDaemons/ssh.plist  
sudo launchctl load -w  /System/Library/LaunchDaemons/ssh.plist

Mas ainda estou recebendo o mesmo erro:

id$ git clone ssh://<user>@<host>:<port>/<repo>
Cloning into 'xxxxx'...
Unsupported KEX algorithm "+diffie-hellman-group1-sha1"
/Users/<user>/.ssh/config line 2: Bad SSH2 KexAlgorithms '+diffie-hellman-group1-sha1'.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights and the repository exists.

Estou no OpenSSH_6.9p1, LibreSSL 2.1.8.

Qualquer ajuda aqui seria muito apreciada.

    
por Vikram Tatavarthi 22.03.2016 / 05:54

1 resposta

3

Este recurso (o sinal + ) é suportado pelo do openssh 7.0 :

Se você precisar usar esse algoritmo específico, precisará especificá-lo diretamente em ~/.ssh/config , como

KexAlgorithms diffie-hellman-group1-sha1
    
por 22.03.2016 / 09:50