Re: ssh from a Solaris machine to a -current server

[Martin Husemann <martin%duskware.de@localhost>]

On Wed, Oct 29, 2014 at 03:03:09PM +0000, Chavdar Ivanov wrote:
> Hi,
> 
> Perhaps a newbie question - with the latest updates to ssh I've lost the
> capability to ssh from a Solaris 10 (or OpenIndiana) host to a
> NetBSD-current server:
> 
> - from an old Solaris 10 machine:
> [srv1] / # ssh support6
> no kex alg
> 
> - from an OpenIdiana (latest hipster):
> 
> ci@uksup4:~$ ssh xci@support6
> no common kex alg: client

See http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=49297,
I ended up adding

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm%openssh.com@localhost,aes256-gcm%openssh.com@localhost,chacha20-poly1305%openssh.com@localhost,aes128-cbc

KexAlgorithms curve25519-sha256%libssh.org@localhost,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1

to my /etc/ssh/sshd_config file in a similar case - you may only need the
KexAlgorithms part.


Martin