Git/ssh-audit
1
0 Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2026-10-27 03:21:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fixed Docker tests.

Browse Source
This commit is contained in:
Joe Testa committed 2026-10-17 15:40:00 -04:00
1 parent 68953dd4cc
commit 8437e62abb
2 files changed
+3 -10
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

test/docker/expected_results/dropbear_2019.78_test1.json
+1 -7
View File
@@ -207,10 +207,8 @@
"algorithm": "kexguess2@matt.ucc.asn.au", "algorithm": "kexguess2@matt.ucc.asn.au",
"notes": { "notes": {
"info": [ "info": [
"pseudo-algorithm used by Dropbear to enable kex guessing",
"available since Dropbear SSH 2013.57" "available since Dropbear SSH 2013.57"
],
"warn": [
"does not provide protection against post-quantum attacks"
] ]
} }
} }
@@ -396,10 +394,6 @@
{ {
"name": "diffie-hellman-group14-sha256", "name": "diffie-hellman-group14-sha256",
"notes": "" "notes": ""
},
{
"name": "kexguess2@matt.ucc.asn.au",
"notes": ""
} }
], ],
"mac": [ "mac": [
test/docker/expected_results/dropbear_2019.78_test1.txt
+2 -3
View File
@@ -27,8 +27,8 @@
 `- [warn] 2048-bit modulus only provides 112-bits of symmetric strength  `- [warn] 2048-bit modulus only provides 112-bits of symmetric strength
 `- [warn] does not provide protection against post-quantum attacks  `- [warn] does not provide protection against post-quantum attacks
`- [info] available since OpenSSH 3.9, Dropbear SSH 0.53 `- [info] available since OpenSSH 3.9, Dropbear SSH 0.53
(kex) kexguess2@matt.ucc.asn.au -- [warn] does not provide protection against post-quantum attacks (kex) kexguess2@matt.ucc.asn.au -- [info] available since Dropbear SSH 2013.57
`- [info] available since Dropbear SSH 2013.57  `- [info] pseudo-algorithm used by Dropbear to enable kex guessing
# host-key algorithms # host-key algorithms
(key) ecdsa-sha2-nistp256 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency (key) ecdsa-sha2-nistp256 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency
@@ -90,7 +90,6 @@
(rec) -curve25519-sha256@libssh.org -- kex algorithm to remove  (rec) -curve25519-sha256@libssh.org -- kex algorithm to remove 
(rec) -diffie-hellman-group14-sha256 -- kex algorithm to remove  (rec) -diffie-hellman-group14-sha256 -- kex algorithm to remove 
(rec) -hmac-sha2-256 -- mac algorithm to remove  (rec) -hmac-sha2-256 -- mac algorithm to remove 
(rec) -kexguess2@matt.ucc.asn.au -- kex algorithm to remove 
# additional info # additional info
(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at: <https://www.ssh-audit.com/hardening_guides.html> (nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at: <https://www.ssh-audit.com/hardening_guides.html>