Re: sshd fatal - no matching cipher found

Hello Steve,

Am 19.02.2020 um 23:30 schrieb Steve Richter <stephenrichter@xxxxxxxxx>:

blocking SSH means terminal access to PASE is blocked over the web?

Yes. But since Scp and Sftp all utilize Ssh to establish a secure communication channel, also these Protocols no longer work.

what I do not understand is, if SSH only works using public/private key
pairs, what is the risk of having your SSH port open to internet access?

If a thoughtful admin changed the default sshd_config from accepting passwords to only accept Key Auth, I have no objections. Thanks for pointing out.

*But*, there have been remotely exploitable Bugs in Openssh and there are more probably still lurking in the code. Your mileage may vary. I'll take down my tinfoil hat now, if you allow? ;-)

The nasty messages you observed will continue to show up, though. If there's no IBM i special way to suppress Sshd warning/error messages creating messages to qsysopr, that is.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc