3 ms·
If you're having trouble following the instructions to secure SSH on OSX, try following the directions here: https://mochtu.de/2015/01/07/updating-openssh-on-ma
by lukeasrodgers 11y ago
If you're having trouble following the instructions to secure SSH on OSX, try following the directions here: https://mochtu.de/2015/01/07/updating-openssh-on-mac-os-x-10-10-yosemite/ https://mochtu.de/2015/01/07/updating-openssh-on-mac-os-x-10...
Without using the brew dupe and ` --with-keychain-support` flag, I was getting cipher errors when trying to use SSH after following the instructions linked to in TFA.
NB: I am not a security expert.
- zachberger 11y agoYou may have a cipher mismatch with the server. If you use ssh with the -vv flag you can see which ciphers the server is supporting and compare that to the ciphers your client supports.
- lukeasrodgers 11y agoThanks for the tip--the server supports that cipher though, it was just an issue with my client.
- alwillis 11y agoA great article on securing SSH is "Secure Secure Shell”: https://stribika.github.io/2015/01/04/secure-secure-shell.html https://stribika.github.io/2015/01/04/secure-secure-shell.ht...
- netheril96 11y agoIf you are on El Capitan, it is not needed to install a brewed openssh. OpenSSH pre-bundled with El Capitan is already pretty up-to-date and includes most of the new ciphersuites.
- alwillis 11y agoEl Capitan ships with OpenSSH 6.9; you can get 7.1 using Homebrew. OpenSSH 7.0 and above disable group 1 Diffie-Hellman by default. From http://www.openssh.com/txt/release-7.0 http://www.openssh.com/txt/release-7.0: Support for the 1024-bit diffie-hellman-group1-sha1 key exchange is disabled by default at run-time. It may be re-enabled using the instructions at http://www.openssh.com/legacy.html http://www.openssh.com/legacy.html