Differences

This shows you the differences between the selected revisions of the page.

2017-02-02 2017-03-07
explicit anchor use (martin) RekeyBytes (martin)
Line 31: Line 31:
| ''Cipher'' | [[ui_login_ssh#encryption_options|SSH encryption cipher selection policy]] | Comma-separated list of cipher preference order, where names of ciphers are ''aes'', ''blowfish'', ''3des'', ''arcfour'' and ''des''. Token ''WARN'' is used to delimit substandard ciphers. Example: ''blowfish,aes,3des,WARN,arcfour,des'' | | ''Cipher'' | [[ui_login_ssh#encryption_options|SSH encryption cipher selection policy]] | Comma-separated list of cipher preference order, where names of ciphers are ''aes'', ''blowfish'', ''3des'', ''arcfour'' and ''des''. Token ''WARN'' is used to delimit substandard ciphers. Example: ''blowfish,aes,3des,WARN,arcfour,des'' |
| ''KEX'' | [[ui_login_kex|Key exchange algorithm selection policy]] | Comma-separated list of KEX preference order, where names of KEXes are ''ecdh'', ''dh-gex-sha1'', ''dh-group14-sha1'', ''rsa'', and ''dh-group1-sha1''. Token ''WARN'' is used to delimit substandard KEXes. Example: ''ecdh,dh-gex-sha1,dh-group14-sha1,rsa,WARN,dh-group1-sha1'' | | ''KEX'' | [[ui_login_kex|Key exchange algorithm selection policy]] | Comma-separated list of KEX preference order, where names of KEXes are ''ecdh'', ''dh-gex-sha1'', ''dh-group14-sha1'', ''rsa'', and ''dh-group1-sha1''. Token ''WARN'' is used to delimit substandard KEXes. Example: ''ecdh,dh-gex-sha1,dh-group14-sha1,rsa,WARN,dh-group1-sha1'' |
 +| ''RekeyBytes'' | [[ui_login_kex|Max data before rekey]] | |
| ''AuthKI'' | [[ui_login_authentication#gssapi|Attempt keyboard-interactive authentication]] | ''0'' = Disabled, ''1'' = Enabled | | ''AuthKI'' | [[ui_login_authentication#gssapi|Attempt keyboard-interactive authentication]] | ''0'' = Disabled, ''1'' = Enabled |
| ''AuthGSSAPI'' | [[ui_login_authentication#gssapi|Attempt GSSAPI authentication]] | ''0'' = Disabled, ''1'' = Enabled | | ''AuthGSSAPI'' | [[ui_login_authentication#gssapi|Attempt GSSAPI authentication]] | ''0'' = Disabled, ''1'' = Enabled |

Last modified: by martin