SShd_Config File issue

User_3NF63

Hello Team,

Could you please provide the assistance below the questions?

1) SSH Server CBC Mode Ciphers Enabled (70658)

2) SSH Weak Key Exchange Algorithms Enabled (153953)

Nik

Hmm. Is it mystery ?

What the magic numbers ?

What version of Oracle Linux You use and what problem you have ?

Regards,

Nik

User_3NF63

I am using the oracle 8.5 version. we have got below the Nessus scan finding.

1) SSH Server CBC Mode Ciphers Enabled (70658)

2) SSH Weak Key Exchange Algorithms Enabled (153953)

user10174131

kex and symmetric ciphers are configured with the crypto-policies packages.

If you run "man 5 update-crypto-policies" you will see that, in addition to OpenSSH, this can be used to remove CBC and weak key exchange from GnuTLS, OpenSSL, NSS, OpenJDK, Libkrb5, Libreswan, and libssh.

If you select the FUTURE policy shown in "man crypto-policies" you will at least remove CBC (as it is not in TLS1.2).