engity-com/bifroest v0.6.0

on GitHub

What's Changed

• Current best practices for used ciphers, key exchanges and message authentication by @blaubaer in #102

⚠️ Breaking change warning

Since this version the default values are:

• ssh.keys.exchanges
  • curve25519-sha256@libssh.org
  • curve25519-sha256
  • diffie-hellman-group16-sha512
• ssh.messages.authentications
  • hmac-sha2-512-etm@openssh.com
  • hmac-sha2-256-etm@openssh.com
• ssh.messages.ciphers
  • aes256-gcm@openssh.com
  • aes256-ctr
  • aes192-ctr

Due to this change (without adjusting the configuration) the following clients are required:

• OpenSSH since 7.4 (2016-12-19)
• Dropbear SSH since 2020.79 (2020-06-15)

To enable older clients check their capabilities and configure configuration settings (named above) accordingly.

⚠️ If you're using clients that does not support those settings we strongly recommend to update them instead weaking the settings of Bifröst.

Full Changelog: v0.5.14...v0.6.0