bugzilla-daemon at mindrot.org
2015-Jan-08 09:37 UTC
[Bug 2334] New: Warn when weak Ciphers are used
https://bugzilla.mindrot.org/show_bug.cgi?id=2334
Bug ID: 2334
Summary: Warn when weak Ciphers are used
Product: Portable OpenSSH
Version: 6.7p1
Hardware: Other
OS: Linux
Status: NEW
Severity: enhancement
Priority: P5
Component: ssh
Assignee: unassigned-bugs at mindrot.org
Reporter: thorsten.sick at email.de
Warn the user when the SSH client or server are using weak ciphers.
This can be done by default, when using -v or on a specific
test-security parameter.
Client and Server settings should be tested.
According to
https://stribika.github.io/2015/01/04/secure-secure-shell.html
Many ciphers (but not all) are either weak or broken. By having an
automatic test in the tools we can improve the settings of the
currently used servers and clients. That would improve the average
security level in a simple anbd efficient way.
--
You are receiving this mail because:
You are watching the assignee of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2015-Oct-06 00:31 UTC
[Bug 2334] Warn when weak Ciphers are used
https://bugzilla.mindrot.org/show_bug.cgi?id=2334
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |WORKSFORME
Status|NEW |RESOLVED
CC| |djm at mindrot.org
--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Our policy is to remove weak ciphers from the configuration. Users need
to take explicit action to enable them, and I don't think adding a
warning on top of offers the right benefit:hassle ratio.
--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
bugzilla-daemon at mindrot.org
2021-Apr-23 05:10 UTC
[Bug 2334] Warn when weak Ciphers are used
https://bugzilla.mindrot.org/show_bug.cgi?id=2334
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |CLOSED
--- Comment #2 from Damien Miller <djm at mindrot.org> ---
closing resolved bugs as of 8.6p1 release
--
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2021-Apr-23 05:10 UTC
[Bug 2334] Warn when weak Ciphers are used
https://bugzilla.mindrot.org/show_bug.cgi?id=2334 --- Comment #3 from Damien Miller <djm at mindrot.org> --- closing resolved bugs as of 8.6p1 release -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug.