diff --git a/ssh/config b/ssh/config index a4ab82a..79fb25e 100644 --- a/ssh/config +++ b/ssh/config @@ -4,11 +4,12 @@ Host *.onion Host * ServerAliveInterval 60 - # use only specified identities, if applicable IdentitiesOnly yes + UpdateHostKeys yes - # https://stribika.github.io/2015/01/04/secure-secure-shell.html + # Originally based on https://stribika.github.io/2015/01/04/secure-secure-shell.html + # Updated on 2020-02-14 to support some new algorithms KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256 - HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa - Ciphers chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr + HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa + Ciphers chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-gcm@openssh.com,aes128-gcm@openssh.com MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com