On Wed, 18 Apr 2018, Darren Tucker wrote: > On 18 April 2018 at 17:35, Hongxu Jia <hongxu.jia@xxxxxxxxxxxxx> wrote: > > While compiling openssl with option `no-des', it caused the openssh > > build failure > > OpenSSL configured that way defines OPENSSL_NO_DES (which is kind of > backward, but that's how OpenSSL does it, and how OpenSSH already > handles OPENSSL_NO_RC4). > > 3des-cbc is the only cipher that is required by RFC4253, but on the > other hand building without OpenSSL will already omit it. @djm? I have no objection to our handling OPENSSL_NO_DES and ommitting 3des-cbc. It's pretty easy to do since it doesn't appear in any default cipher lists any more... -d _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
