ssh-audit/test/docker/expected_results/openssh_8.0p1_builtin_policy_test2.txt

Host:   localhost:2222
Policy: Hardened OpenSSH Server v8.0 (version 4)
Result: [0;31m❌ Failed![0m
[0;33m
Errors:
  * Group exchange (diffie-hellman-group-exchange-sha256) modulus sizes did not match.
    - Expected: 3072
    - Actual:   4096

  * Host key (rsa-sha2-256) sizes did not match.
    - Expected: 4096
    - Actual:   3072

  * Host key (rsa-sha2-512) sizes did not match.
    - Expected: 4096
    - Actual:   3072

  * MACs did not match.
    - Expected: hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, umac-128-etm@openssh.com
    - Actual:   umac-64-etm@openssh.com, umac-128-etm@openssh.com, hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, hmac-sha1-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-sha1
[0m
-												Moved built-in policies from external files to internal database. (#75)

											
										
										
											2020-10-19 23:27:37 +02:00
+								Host:   localhost:2222
-												Added note that when a target is properly configured against the Terrapin vulnerability that unpatched peers may still create vulnerable connections.  Updated Ubuntu Server & Client 20.04 & 22.04 policies to include new key exchange markers related to Terrapin counter-measures.

											
										
										
											2023-12-19 20:03:28 +01:00
+								Policy: Hardened OpenSSH Server v8.0 (version 4)
-												Moved built-in policies from external files to internal database. (#75)

											
										
										
											2020-10-19 23:27:37 +02:00
+								Result: [0;31m❌ Failed![0m
 								[0;33m
 								Errors:
-												Added note that when a target is properly configured against the Terrapin vulnerability that unpatched peers may still create vulnerable connections.  Updated Ubuntu Server & Client 20.04 & 22.04 policies to include new key exchange markers related to Terrapin counter-measures.

											
										
										
											2023-12-19 20:03:28 +01:00
+								  * Group exchange (diffie-hellman-group-exchange-sha256) modulus sizes did not match.
 								    - Expected: 3072
 								    - Actual:   4096
-												Fixed built-in policy formatting and filled in missing host key size information.

											
										
										
											2023-04-26 21:47:58 +02:00
+								  * Host key (rsa-sha2-256) sizes did not match.
 								    - Expected: 4096
 								    - Actual:   3072
 								  * Host key (rsa-sha2-512) sizes did not match.
 								    - Expected: 4096
 								    - Actual:   3072
-												Now reports policy errors in an easier to read format. (#63)

											
										
										
											2020-10-20 22:25:39 +02:00
+								  * MACs did not match.
 								    - Expected: hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, umac-128-etm@openssh.com
 								    - Actual:   umac-64-etm@openssh.com, umac-128-etm@openssh.com, hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, hmac-sha1-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-sha1
 								[0m