You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@guacamole.apache.org by Ellis Fisher <el...@official.mod.uk> on 2019/02/25 15:56:33 UTC

Guacamole and CIS Benchmark Centos Images

Hi,


I am trying to utilise Guacamole with Centos Images that have been CIS Benchmarks.  I am coming across an issue with SSH more specifically MAC Algorithms.


It is only offering these options:

hmac-sha1,

hmac-sha1-96,

hmac-md5,

hmac-md5-96,

hmac-ripemd160,

hmac-ripemd160@openssh.com


How can I go about upgrading these to utilising more secure Algorithms such as the Benchmark suggests?

hmac-sha2-512-etm@openssh.com<ma...@openssh.com>,

hmac-sha2-256-etm@openssh.com,

umac-128-etm@openssh.com<ma...@openssh.com>,

hmac-sha2-512,

hmac-sha2-256,

umac-128@openssh.com<ma...@openssh.com>



Kind regards,
Ellis

Re: Guacamole and CIS Benchmark Centos Images

Posted by Nick Couchman <vn...@apache.org>.

On Mon, Feb 25, 2019 at 11:43 AM Ellis Fisher <
ellis.fisher105@official.mod.uk> wrote:

> Hi,
>
>
> I am trying to utilise Guacamole with Centos Images that have been CIS
> Benchmarks.  I am coming across an issue with SSH more specifically MAC
> Algorithms.
>
>
This is most likely an issue with the version of libssh2 included with
CentOS.  CentOS7 includes libssh2-1.4.3 - several algorithms were added in
1.7.0.

https://libssh2.org/changes.html

-Nick