From a29f70e4fb17a4504afa2926771aa01df064b323 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 18 Sep 2018 16:49:49 +0200 Subject: [PATCH] testing: Use AES-GCM for SSH connections RC4, which was previously used for performance reasons, is not supported anymore with newer versions of SSH (stretch still supports it, but it requires explicit configuration on the guests when they act as clients too - the version in Ubuntu 18.04 apparently doesn't support it anymore at all). AES-GCM should actually be faster (at least for larger amounts of data and in particular with hardware acceleration). --- testing/hosts/default/etc/ssh/sshd_config | 1 + 1 file changed, 1 insertion(+) diff --git a/testing/hosts/default/etc/ssh/sshd_config b/testing/hosts/default/etc/ssh/sshd_config index 46b1f0231..23fed4ed0 100644 --- a/testing/hosts/default/etc/ssh/sshd_config +++ b/testing/hosts/default/etc/ssh/sshd_config @@ -1,5 +1,6 @@ Port 22 Protocol 2 +Ciphers aes128-gcm@openssh.com HostKey /etc/ssh/ssh_host_rsa_key HostKey /etc/ssh/ssh_host_dsa_key HostKey /etc/ssh/ssh_host_ecdsa_key