Skip to content

Commit

Permalink
Revert "Disable chacha20-poly cipher in sshd config as a workaround."
Browse files Browse the repository at this point in the history
This reverts commit eff729b.
With new gcc 8.3 chacha20-poly cipher works properly again.

[sshd] Re-enable chacha20-poly cipher. JB#44691
  • Loading branch information
jusa committed Dec 10, 2019
1 parent 027fe29 commit 58ee110
Showing 1 changed file with 0 additions and 6 deletions.
6 changes: 0 additions & 6 deletions rpm/sshd_config
Expand Up @@ -22,12 +22,6 @@ HostKey /etc/ssh/ssh_host_ed25519_key
# Ciphers and keying
#RekeyLimit default none

# Cipher chacha20-poly1305@openssh.com causes connection error with openssh
# compiled with gcc 4.9.4: "message authentication code incorrect".
# This is probably a compiler/openssh bug but as a workaround drop the
# chacha cipher from supported list for now (see JB#44920).
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com

# Logging
#SyslogFacility AUTH
#LogLevel INFO
Expand Down

0 comments on commit 58ee110

Please sign in to comment.