Project

General

Profile

Actions
Copy link

Feature #425

closed

SSH Daemon in v1.2.3+ (including 2.0-Beta1) - Please add 3des-cbc cipher

Added by Pho Bia over 15 years ago. Updated over 15 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Operating System
Target version:
-
Start date:
03/14/2010
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

Hello,

I discovered that my java SSH client (MIDPSSH) for my Blackberry could no longer connect to any pfSense box I had updated to v1.2.3 or newer and posted in the forum. Older builds continue to work.

After working with the developer of a more current SSH client project (BBSSH), the issue was nailed down to a missing cipher in newer versions.

As my client required 3des-cbc, the fix was to make the following change to /etc/sshd :

Original Line :

$sshconf = "Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc\n";

Changed Line :

$sshconf = "Ciphers 3des-cbc,aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc\n";

I'd like to request that this cipher be re-added if possible for future builds.

Thanks in advance!

-- Phob

Actions
Copy link

Also available in: Atom PDF