OpenSSH changes between 10.2 and 10.3 ...

[Eugene Grosbein]

On 14.04.2016 16:44, Patrick M. Hausen wrote:
> Hi, all,
> 
> minor problem/annoyance here:
> 
> root at noc:/etc/ssh # ssh admin at 10.4.0.62
> Unable to negotiate with 10.4.0.62 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,none
> root at noc:/etc/ssh # uname -a
> FreeBSD noc.pluspunkthosting.de 10.3-RELEASE FreeBSD 10.3-RELEASE #3: Wed Apr 13 14:46:57 CEST 2016     root at noc.pluspunkthosting.de:/usr/obj/usr/src/sys/GENERIC  amd64
> 
> Of course I was able to find http://www.openssh.com/legacy.html myself.
> 
> FreeBSD 10.2 uses OpenSSH 6.6.x while 10.3 imported 7.2.
> So far so good.
> 
> The recommended method from the document above works on the
> command line:
> 
> 	ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 admin at 10.4.0.62
> 
> But if I add
> 
> 	KexAlgorithms +diffie-hellman-group1-sha1
> 
> to /etc/ssh/ssh_config, that does not change anything.

It does change for me. And helps. Make double sure you have added KexAlgorithms
to system wide defaults section of ssh_config and not after limiting "Host" directive,
or similar.