[GTALUG] dh key exchange question.

Mike el.fontanero at gmail.com
Thu Oct 4 21:54:25 EDT 2018


Strange...

I set up an openssh -dd server on a weird port for Karen to connect
to, and it said this:

Client reports itself as: SSHDOS_0.2.1
Server used is: SSH-2.0-OpenSSH_6.0p1

Negotiation yielded:

Key exhange (KEX):     diffie-hellman-group-exchange-sha1
Host key algorithm:    ssh-dss (a.k.a. DSA)
Session cipher:  aes128-cbc
Message authentication Code (MAC):  hmac-sha1

What bugs me is that running
      nmap --script ssh2-enum-algos  dreamhost.com
lists, among others,

kex_algorithms:
... diffie-hellman-group-exchange-sha1

server_host_key_algorithms:
...  ssh-dss

encryption_algorithms:
...  aes128-cbc

mac_algorithms:
... hmac-sha1


I don't see that there should be any trouble connecting to dreamhost.com...


More information about the talk mailing list