From 00c5222ddc0c8edcaa4ea45ac03befdc8013d137 Mon Sep 17 00:00:00 2001 From: "djm@openbsd.org" Date: Thu, 5 Apr 2018 22:54:28 +0000 Subject: [PATCH] upstream: We don't offer CBC cipher by default any more. Spotted by Renaud Allard (via otto@) OpenBSD-Commit-ID: a559b1eef741557dd959ae378b665a2977d92dca --- ssh_config.5 | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/ssh_config.5 b/ssh_config.5 index 010bca479..75a21b595 100644 --- a/ssh_config.5 +++ b/ssh_config.5 @@ -33,8 +33,8 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: ssh_config.5,v 1.269 2018/04/04 15:12:17 job Exp $ -.Dd $Mdocdate: April 4 2018 $ +.\" $OpenBSD: ssh_config.5,v 1.270 2018/04/05 22:54:28 djm Exp $ +.Dd $Mdocdate: April 5 2018 $ .Dt SSH_CONFIG 5 .Os .Sh NAME @@ -425,8 +425,7 @@ The default is: .Bd -literal -offset indent chacha20-poly1305@openssh.com, aes128-ctr,aes192-ctr,aes256-ctr, -aes128-gcm@openssh.com,aes256-gcm@openssh.com, -aes128-cbc,aes192-cbc,aes256-cbc +aes128-gcm@openssh.com,aes256-gcm@openssh.com .Ed .Pp The list of available ciphers may also be obtained using