Skip to content

Instantly share code, notes, and snippets.

@mochtu

mochtu/ssh-config-oldssh

Last active February 2, 2023 10:09
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mochtu/4dd6b4a9934a11fb2f8b to your computer and use it in GitHub Desktop.
Save mochtu/4dd6b4a9934a11fb2f8b to your computer and use it in GitHub Desktop.
Download ZIP
OSX 10.10 SSH Client config for talking safely to servers based on @stribika blog post
Raw
ssh-config-oldssh
# Sane security defaults for OSX 10.10 SSH clients that are still based on OpenSSH6.2_p2
# Currently your old OpenSSH installation only supports a subset of ciphers and key exchange algorithms.
# OSX Users: consider updating your openssh version -> https://mochtu.de/2015/01/07/updating-openssh-on-mac-os-x-10-10-yosemite/
# Explanation: http://mochtu.de/2015/01/06/securing-ssh-connections/
# Background information: https://stribika.github.io/2015/01/04/secure-secure-shell.html
Host *
KexAlgorithms diffie-hellman-group-exchange-sha256
Ciphers aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,umac-128@openssh.com
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment