e defaults in the various RHEL version differ and the current default can be found in manual page for sshd_config. For example RHEL6:
The default is: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc, aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
You can remove the CBC ciphers by adding the line for RHEL7:
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour
The line for RHEL6:
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour
The line for RHEL5 (note the […]
Recent Comments