1
0
mirror of https://github.com/libssh2/libssh2.git synced 2026-10-24 03:48:58 +03:00

GHA: replace diffie-hellman-group-exchange-sha256 with diffie-hellman-group16-sha512

To use a superior fallback KEX.

Refs:
https://datatracker.ietf.org/doc/html/rfc9142
https://github.blog/changelog/2026-09-22-security-improvements-for-ssh/

Follow-up to bb8e0957b8 #2590

Closes #2648
This commit is contained in:
Viktor Szakats
2026-10-03 00:08:45 +02:00
parent 483f2ab286
commit 740c2d33ad

View File

@@ -1459,7 +1459,7 @@ jobs:
cd "curl-${CURL_VERNUM}"
export TFLAGS='-j8 SCP SFTP --retry=0 --repeat=6'
if [[ "${MATRIX_CRYPTO}" = *'WinCNG'* ]]; then
export CURL_TEST_SSH_ENABLE_KEX=diffie-hellman-group-exchange-sha256
export CURL_TEST_SSH_ENABLE_KEX=diffie-hellman-group16-sha512
fi
if [ -n "${MATRIX_OPENSSH}" ]; then # OpenSSH-Windows
TFLAGS+=' ~601 ~603 ~617 ~619 ~621 ~641 ~665 ~2004' # SCP