4 ms·
If I was running Redhat machines and had bought support to the end of the year I think I'd expect Redhat to release packages for RHEL 5 that let me SSH to them
by wlll 6y ago
If I was running Redhat machines and had bought support to the end of the year I think I'd expect Redhat to release packages for RHEL 5 that let me SSH to them from RHEL 8 machines.
- quietbritishjim 6y agoDoesn't it defeat the object of using an old, stable edition of an operating system if you keep installing feature updates to it?
- rwmj 6y agoRed Hat does update RHEL with new features, although not RHEL 5 which is now only getting security fixes. In this case there is a workaround (on the RHEL 8 / ssh client end) which is to enable legacy crypto policies. However you have to do this globally at least for all ssh connections (and our recommended command does it globally for the whole machine), and I guess there are reasons why the legacy policies are disabled by default, probably to do with possible MITM attacks against weak cyphers. So the situation isn't exactly ideal. Having said all that it would be up to me to actually fix this and I haven't looked into it in great detail since I don't believe any customers have asked about it. We only found out about it in our internal product QA.
- user5994461 6y agoThe legacy policies are disabled because they are not authorized for usage by regulations (NIST and co). Old large organization are compliance and process oriented. They run security audits that scan machines, finding X version of software that's end of life and Y cipher that's insecure, then raise control breaks to the systems owners to resolve.