Re: svn commit: r294495 - in head: . crypto/openssh

2016-01-22 Thread Slawa Olhovchenkov
On Fri, Jan 22, 2016 at 10:56:48PM +0100, Dag-Erling Smørgrav wrote: > Bryan Drewery writes: > > I've used these in sshd_config and ssh_config to restore some removed > > functionality: > > > > Ciphers +blowfish-cbc,arcfour,aes128-cbc,3des-cbc > > KexAlgorithms +diffie-hellman-group1-sha1 > > Do

Re: svn commit: r294495 - in head: . crypto/openssh

2016-01-22 Thread Bryan Drewery
On 1/22/2016 1:56 PM, Dag-Erling Smørgrav wrote: > Bryan Drewery writes: >> I've used these in sshd_config and ssh_config to restore some removed >> functionality: >> >> Ciphers +blowfish-cbc,arcfour,aes128-cbc,3des-cbc >> KexAlgorithms +diffie-hellman-group1-sha1 > > Do you actually need these?

Re: svn commit: r294495 - in head: . crypto/openssh

2016-01-22 Thread Dag-Erling Smørgrav
Bryan Drewery writes: > I've used these in sshd_config and ssh_config to restore some removed > functionality: > > Ciphers +blowfish-cbc,arcfour,aes128-cbc,3des-cbc > KexAlgorithms +diffie-hellman-group1-sha1 Do you actually need these? Do you know of any clients or servers which do not support

Re: svn commit: r294495 - in head: . crypto/openssh

2016-01-22 Thread Bryan Drewery
On 1/22/2016 1:37 AM, Dag-Erling Smørgrav wrote: > Conrad Meyer writes: >> Are we going to maintain DSA key support after upstream deprecates it >> entirely? And why? > > I am not aware of any plans to remove DSA support. It has simply been > disabled in the default run-time configuration - unl

Re: svn commit: r294495 - in head: . crypto/openssh

2016-01-22 Thread Dag-Erling Smørgrav
Conrad Meyer writes: > Are we going to maintain DSA key support after upstream deprecates it > entirely? And why? I am not aware of any plans to remove DSA support. It has simply been disabled in the default run-time configuration - unlike, for instance, libwrap, which was removed entirely, and

Re: svn commit: r294495 - in head: . crypto/openssh

2016-01-21 Thread Conrad Meyer
On Thu, Jan 21, 2016 at 3:10 AM, Dag-Erling Smørgrav wrote: > Author: des > Date: Thu Jan 21 11:10:14 2016 > New Revision: 294495 > URL: https://svnweb.freebsd.org/changeset/base/294495 > > Log: > Enable DSA keys by default. They were disabled in OpenSSH 6.9p1. Are we going to maintain DSA key

svn commit: r294495 - in head: . crypto/openssh

2016-01-21 Thread Dag-Erling Smørgrav
Author: des Date: Thu Jan 21 11:10:14 2016 New Revision: 294495 URL: https://svnweb.freebsd.org/changeset/base/294495 Log: Enable DSA keys by default. They were disabled in OpenSSH 6.9p1. Noticed by: glebius Modified: head/UPDATING head/crypto/openssh/myproposal.h (contents, props