mirror of
https://github.com/libssh2/libssh2.git
synced 2026-10-24 03:48:58 +03:00
GHA: replace diffie-hellman-group-exchange-sha256 with diffie-hellman-group16-sha512
To use a superior fallback KEX.
Refs:
https://datatracker.ietf.org/doc/html/rfc9142
https://github.blog/changelog/2026-09-22-security-improvements-for-ssh/
Follow-up to bb8e0957b8 #2590
Closes #2648
This commit is contained in:
2
.github/workflows/ci.yml
vendored
2
.github/workflows/ci.yml
vendored
@@ -1459,7 +1459,7 @@ jobs:
|
||||
cd "curl-${CURL_VERNUM}"
|
||||
export TFLAGS='-j8 SCP SFTP --retry=0 --repeat=6'
|
||||
if [[ "${MATRIX_CRYPTO}" = *'WinCNG'* ]]; then
|
||||
export CURL_TEST_SSH_ENABLE_KEX=diffie-hellman-group-exchange-sha256
|
||||
export CURL_TEST_SSH_ENABLE_KEX=diffie-hellman-group16-sha512
|
||||
fi
|
||||
if [ -n "${MATRIX_OPENSSH}" ]; then # OpenSSH-Windows
|
||||
TFLAGS+=' ~601 ~603 ~617 ~619 ~621 ~641 ~665 ~2004' # SCP
|
||||
|
||||
Reference in New Issue
Block a user