[jira] [Commented] (GUACAMOLE-407) Support "modern" ssh crypto - only SHA1 is available

["Michael Jumper (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-407?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16195783#comment-16195783 ] 

Michael Jumper commented on GUACAMOLE-407:
------------------------------------------

It's not Guacamole which determines the available key exchange methods, MACs, etc. for SSH, but rather the library which Guacamole uses to communicate via SSH, libssh2:

https://github.com/libssh2/libssh2

If libssh2 lacks this support, that would be the place to open a new issue / pull request.

> Support "modern" ssh crypto - only SHA1 is available
> ----------------------------------------------------
>
>                 Key: GUACAMOLE-407
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-407
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: SSH
>    Affects Versions: 0.9.13-incubating
>         Environment: guacamole 0.9.13-incubating under docker https://hub.docker.com/r/guacamole/guacamole/
>            Reporter: Sven Gottwald
>
> It seems that guacamole doesn't support any "modern" ssh crypto.
> The following key exchange methods are supported:
> * diffie-hellman-group14-sha1
> * diffie-hellman-group-exchange-sha1
> * diffie-hellman-group1-sha1
> The following MACs are supported:
> * hmac-sha1,hmac-sha1-96
> * hmac-md5,hmac-md5-96
> * hmac-ripemd160
> * hmac-ripemd160@openssh.com
> Guacamole SHOULD support modern crypto like SHA2 and curve25519, see https://wiki.mozilla.org/Security/Guidelines/OpenSSH for more information and references.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)