Openssh存在弱加密算法解决

漏洞详情：

![漏洞列表]( https://img-blog.csdnimg.cn/2021051917075160.png?x-oss-process=image/watermark ,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NzI5NzA4OA==,size_16,color_FFFFFF,t_70#pic_center)

![漏洞详情]( https://img-blog.csdnimg.cn/20210519170518228.png?x-oss-process=image/watermark ,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NzI5NzA4OA==,size_16,color_FFFFFF,t_70#pic_center)

解决方案：

编辑/etc/ssh/sshd_config
最后面添加以下内容（去掉arcfour,arcfour128,arcfour256等弱加密算法）：

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes25-cbc

![如图所示]( https://img-blog.csdnimg.cn/20210519171000375.png?x-oss-process=image/watermark ,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NzI5NzA4OA==,size_16,color_FFFFFF,t_70#pic_center)
保存文件后重启SSH服务：

systemctl restart sshd
posted @ 2021-05-31 09:51  小来丝  阅读(1556)  评论(0)    收藏  举报