On Thu Oct 30 2014 at 7:41:25 AM Martin Husemann <
martin%duskware.de@localhost> wrote:
On Wed, Oct 29, 2014 at 03:03:09PM +0000, Chavdar Ivanov wrote:
> Hi,
>
> Perhaps a newbie question - with the latest updates to ssh I've lost the
> capability to ssh from a Solaris 10 (or OpenIndiana) host to a
> NetBSD-current server:
>
> - from an old Solaris 10 machine:
> [srv1] / # ssh support6
> no kex alg
>
> - from an OpenIdiana (latest hipster):
>
> ci@uksup4:~$ ssh xci@support6
> no common kex alg: client
See http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=49297,
I ended up adding
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm%openssh.com@localhost,aes256-gcm%openssh.com@localhost,chacha20-poly1305%openssh.com@localhost,aes128-cbc
KexAlgorithms curve25519-sha256%libssh.org@localhost,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
to my /etc/ssh/sshd_config file in a similar case - you may only need the
KexAlgorithms part.
Martin