DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=CbZO4pH
	HJgYP/ItHglUZ4dVGWg37VYmp1vCsrLy25t/H7QHskKaLQvs3u7qnyLZNHpGFGZ6
	5AceIHP7t8fJjV7vCN3vJO43GDzReYz4+/Pi/1SX1cQHm/SWSVbBodHYOMj2BTop
	bJSUSAxivwRp0Yggkfxhb20NNplTGi7mb/EI=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
In-Reply-To: <9894fed9-9416-d3cf-71c6-3640291c59ac@gmail.com>
References: <CA+XsFcEFOjSHq7J9kbFCdd6bZndcxKmipvmEFXdKGFP2gYCqKA@mail.gmail.com> <9894fed9-9416-d3cf-71c6-3640291c59ac@gmail.com>
From: Stephen John Smoogen <smooge@gmail.com>
Date: Mon, 3 Apr 2017 12:23:27 -0400
Message-ID: <CANnLRdiHY-UnkbLtxCy0NVGrTcOCN0ZgoQmMt0qaM2BWZnCoFg@mail.gmail.com>
Subject: Re: Downgrade opensshh from 7.4 to 5.1?
To: cygwin@cygwin.com
Content-Type: text/plain; charset=UTF-8

On 3 April 2017 at 11:03, cyg Simple <cygsimple@gmail.com> wrote:
> On 4/3/2017 10:45 AM, Kleine Raphael wrote:
>> Hello
>>
>> My client can not support OpenSSH_7.2p2 (OpenSSL 1.0.2h  3 May 2016)
>> and I must downgrade the server to OpenSSH_5.1p1 (OpenSSL 0.9.8l 5 Nov
>> 2009)
>>
>
> Explain more the "can not support".
>

While I agree we need more information, this may be one of the cases
where a person is trying to be circumspect due to other policies.

I think that the OpenSSH after 6.9 started dropping support for older
algorithms (https://www.openssh.com/txt/release-7.0) . If you are
using SSH to manage various industrial equipment then you are pretty
much stuck with using older SSH because the equipment may only support
RC4 or maybe only has keys of 512 or 768 bits. [Trying to get an
industrial manufacturer to update equipment is a multi-decade process.
They may have just started creating hardware which has SSH vs straight
telnet and they won't update to a newer version of SSH until 2028 :/]


-- 
Stephen J Smoogen.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple