Skip to Main Content

Infrastructure Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Disable hmac-sha1-96 and hmac-md5-96 on Solaris 10

user12280949Sep 12 2017 — edited Sep 12 2017

Hi ,

I have a solaris 10 box with the following details :

cat /etc/release

                   Oracle Solaris 10 8/11 s10s_u10wos_17b SPARC

  Copyright (c) 1983, 2011, Oracle and/or its affiliates. All rights reserved.

                            Assembled 23 August 2011

I am trying to disable the following MAC hmac-sha1-96 and hmac-md5-96 on it .

After adding the following line in the /etc/ssh/sshd_config file the service is going into maintenance mode

     Macs hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha2-256-96,hmac-sha2-512-96

In the /var/svc/log/network-ssh:default.log file the contents are as follows:

[ Sep 12 13:39:11 Executing start method ("/lib/svc/method/sshd start") ]

/etc/ssh/sshd_config line 158: Bad SSH2 mac spec 'hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha2-256-96,hmac-sha2-512-96'.

[ Sep 12 13:39:11 Method "start" exited with status 255 ]

The ssh version is as below

ssh -V

Sun_SSH_1.1.6, SSH protocols 1.5/2.0, OpenSSL 0x0090704f

Please advice how to resolve this .

Best Regards

amit

This post has been answered by Nik on Sep 12 2017
Jump to Answer
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Oct 10 2017
Added on Sep 12 2017
2 comments
1,093 views