openwrt/package/network
Konstantin Demin 2d9a0be307 dropbear: disable two weak kex/mac algorithms
hmac-sha1 and diffie-hellman-group14-sha1 are weak algorithms.
A future deprecation notice of ssh-rsa (2048-bit) has been issued. [1]

It has no place in a potentially internet-facing daemon like dropbear.
Upstream has acknowledged this and offered this solution to disable
these two until this is made to be the default in the next release
of dropbear next year. [2]

1. https://www.openssh.com/txt/release-8.2
2. https://github.com/mkj/dropbear/issues/138

Signed-off-by: John Audia <therealgraysky@proton.me>
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2024-02-09 09:13:05 +00:00
..
config wifi-scripts: fix copy&paste issue in metadata 2024-02-06 10:47:22 +01:00
ipv6 package: avoid the use of eval to parse ipcalc.sh output 2023-09-25 15:02:49 +02:00
services dropbear: disable two weak kex/mac algorithms 2024-02-09 09:13:05 +00:00
utils iwinfo: update to latest git HEAD 2024-01-26 18:29:54 +01:00