Comment 0 for bug 1933722

Revision history for this message
Sam Bull (dreamsorcerer) wrote :

With a secure config created for SSH, I am unable to connect without adding a weakened config for launchpad.

For example:
Unable to negotiate with 91.189.95.84 port 22: no matching host key type found. Their offer: ssh-rsa

ssh-rsa is considered insecure, enough that I believe it has been disabled by default in openssh now. Maybe it should be disabled for LP, but it certainly shouldn't be the ONLY option for connecting.

Additionally, I need to add hmac-sha2-512 to MACs, because LP doesn't support any etm versions, for example: <email address hidden> or <email address hidden>