ssh-audit/test/docker/expected_results/openssh_8.0p1_builtin_policy_test2.txt at aaa7d245657264492e3e3b483141b1e40408ec91

mirror of https://github.com/jtesta/ssh-audit.git synced 2025-11-23 08:55:18 +01:00

Files

Joe Testa c259a83782 Added note that when a target is properly configured against the Terrapin vulnerability that unpatched peers may still create vulnerable connections. Updated Ubuntu Server & Client 20.04 & 22.04 policies to include new key exchange markers related to Terrapin counter-measures.

2023-12-19 14:03:28 -05:00

804 B

Raw Blame History

Host: localhost:2222
Policy: Hardened OpenSSH Server v8.0 (version 4)
Result: ❌ Failed!

Errors:
* Group exchange (diffie-hellman-group-exchange-sha256) modulus sizes did not match.
- Expected: 3072
- Actual: 4096

* Host key (rsa-sha2-256) sizes did not match.
- Expected: 4096
- Actual: 3072

* Host key (rsa-sha2-512) sizes did not match.
- Expected: 4096
- Actual: 3072

* MACs did not match.
- Expected: hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, umac-128-etm@openssh.com
- Actual: umac-64-etm@openssh.com, umac-128-etm@openssh.com, hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, hmac-sha1-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-sha1

804 B Raw Blame History

804 B

Raw Blame History