X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:mime-version:in-reply-to:references:from:date :message-id:subject:to:content-type; q=dns; s=default; b=CbZO4pH HJgYP/ItHglUZ4dVGWg37VYmp1vCsrLy25t/H7QHskKaLQvs3u7qnyLZNHpGFGZ6 5AceIHP7t8fJjV7vCN3vJO43GDzReYz4+/Pi/1SX1cQHm/SWSVbBodHYOMj2BTop bJSUSAxivwRp0Yggkfxhb20NNplTGi7mb/EI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:mime-version:in-reply-to:references:from:date :message-id:subject:to:content-type; s=default; bh=lv9xiKPXRHzLx sWljoYF/HA2ltM=; b=vBvxwgu9367VAqimEaUEAuDFLxroJMIgM1nz948kpJJq8 CY7rdyaEzv3cr3eYhIHHmF0cgUQXKGQARJjNyT1X8teYgGS0Z+wLbyfmTokLMb9S i5+ZBTkPeDAk7dJ7Se+IU2BklpXBPrvZ6eNAhZxrtAKdG5JwOwaJV72HmfT6nE= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.3 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM,SPF_PASS autolearn=no version=3.3.2 spammy=txt, U*cygsimple, cygsimple AT gmail DOT com, sk:cygsimp X-HELO: mail-it0-f68.google.com X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=wjLwH4/r32iG5Zq8NjPclNpfLOytiBWQzV2T3fc/AG8=; b=K8sU1Ay61Et8vm/RSvv+BDxdVFtD/PO67kuaoBwoaYJZg3KuC7aMCawF6MJvzgWDZN PxTknHqL690PfcEaSbWTk8Vs72sQp1psnkxHf7Q3jQtXGobCTwyHuiBs4Rg20pc4ZWpI xbAf+wuFRsL2/wYezOMXpzpsoiC+8Bek8bzAcLUIk58YYTZsvyvE8sesM02XOu7AHLGH OMp0YwwbUufyxBAASAKJXfXa9/K6te6MNeVXOG7H9kPCbi1sadCGrf9P9AAgcCrAQhhb N1zmKEOTj9wceC/nNWxsGXZk86D1KZuGzQt53IJU0H9hZG21kQ+tbZdGa3x/bAtqDs/e 2gMQ== X-Gm-Message-State: AFeK/H1iwZ9uh7721Iy6Iu4MEEj1Zyce4rPrJ89JP2Bmsbpm+Ahd6CWDBLIATo8+bvf0U1k3DVg7qr3vVZgHPw== X-Received: by 10.36.138.129 with SMTP id v123mr10422977itd.108.1491236607735; Mon, 03 Apr 2017 09:23:27 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <9894fed9-9416-d3cf-71c6-3640291c59ac@gmail.com> References: <9894fed9-9416-d3cf-71c6-3640291c59ac AT gmail DOT com> From: Stephen John Smoogen Date: Mon, 3 Apr 2017 12:23:27 -0400 Message-ID: Subject: Re: Downgrade opensshh from 7.4 to 5.1? To: cygwin AT cygwin DOT com Content-Type: text/plain; charset=UTF-8 X-IsSubscribed: yes On 3 April 2017 at 11:03, cyg Simple wrote: > On 4/3/2017 10:45 AM, Kleine Raphael wrote: >> Hello >> >> My client can not support OpenSSH_7.2p2 (OpenSSL 1.0.2h 3 May 2016) >> and I must downgrade the server to OpenSSH_5.1p1 (OpenSSL 0.9.8l 5 Nov >> 2009) >> > > Explain more the "can not support". > While I agree we need more information, this may be one of the cases where a person is trying to be circumspect due to other policies. I think that the OpenSSH after 6.9 started dropping support for older algorithms (https://www.openssh.com/txt/release-7.0) . If you are using SSH to manage various industrial equipment then you are pretty much stuck with using older SSH because the equipment may only support RC4 or maybe only has keys of 512 or 768 bits. [Trying to get an industrial manufacturer to update equipment is a multi-decade process. They may have just started creating hardware which has SSH vs straight telnet and they won't update to a newer version of SSH until 2028 :/] -- Stephen J Smoogen. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple