From 3ca7e1eea9afc30bf4dd8fdeaad007b46a3a8cf7 Mon Sep 17 00:00:00 2001 From: Jakub Jelen Date: Tue, 7 Aug 2018 15:04:13 +0200 Subject: [PATCH] kex: Offer SHA2 extension signature algorithms by default Signed-off-by: Jakub Jelen Reviewed-by: Andreas Schneider --- src/kex.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/kex.c b/src/kex.c index 67a54fa1..7a07c332 100644 --- a/src/kex.c +++ b/src/kex.c @@ -86,12 +86,12 @@ #ifdef HAVE_ECDH #define ECDH "ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521," -#define HOSTKEYS "ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss" +#define HOSTKEYS "ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,rsa-sha2-512,rsa-sha2-256,ssh-dss" #else #ifdef HAVE_DSA -#define HOSTKEYS "ssh-ed25519,ssh-rsa,ssh-dss" +#define HOSTKEYS "ssh-ed25519,ssh-rsa,rsa-sha2-512,rsa-sha2-256,ssh-dss" #else -#define HOSTKEYS "ssh-ed25519,ssh-rsa" +#define HOSTKEYS "ssh-ed25519,ssh-rsa,rsa-sha2-512,rsa-sha2-256" #endif #define ECDH "" #endif