How to disable specific MAC, Ciphers, KexAlgorithms, HostKeyAlgorithms and PubkeyAcceptedKeyTypes for sshd service in RHEL 9 ?
Issue
- How to configure specific mac, ciphers, KexAlgorithms, hostkeyalgorithms and pubkeyacceptedkeytypes for sshd service in RHEL 9? The mix of algorithms cannot configured by
crypto-policies. - Security scanners regards specific algorithm and ciphers for ssh as vulnerable and hence there is requirement to modify these parameters in sshd_config to fix the vulnerability.
- The system configuration requirement is given as OpenSSH configuration notation. How to use OpenSSH configuration notation directly instead of using
crypto-policies?
Environment
- Red Hat Enterprise Linux 9
- openssh-server
- crypto-policies
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
