immortalwrt/package/network/services/dropbear
Konstantin Demin 2d9a0be307 dropbear: disable two weak kex/mac algorithms
hmac-sha1 and diffie-hellman-group14-sha1 are weak algorithms.
A future deprecation notice of ssh-rsa (2048-bit) has been issued. [1]

It has no place in a potentially internet-facing daemon like dropbear.
Upstream has acknowledged this and offered this solution to disable
these two until this is made to be the default in the next release
of dropbear next year. [2]

1. https://www.openssh.com/txt/release-8.2
2. https://github.com/mkj/dropbear/issues/138

Signed-off-by: John Audia <therealgraysky@proton.me>
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2024-02-09 09:13:05 +00:00
..
files dropbear: increase default receive window size 2023-12-28 23:37:51 +01:00
patches dropbear: cherry-pick upstream patches 2024-02-09 09:13:05 +00:00
Config.in dropbear: minor config clarification 2024-02-09 09:13:05 +00:00
Makefile dropbear: disable two weak kex/mac algorithms 2024-02-09 09:13:05 +00:00