OpenSSH Upgrade and Increased support for Diffie-Hellman Groups

OpenSSH server and client is upgraded from 6.5p1 to 7.5p1.

Support for key exchange algorithms diffie-hellman-group14-sha256 (2,048 bits), diffie-hellman-group16-sha512 (4,096 bits), and diffie-hellman-group18-sha512 (8,192 bits) is added.

Earlier versions of ExtremeXOS had all supported algorithms configured by default; for ExtremeXOS 22.5, several weaker algorithms are disabled by default, which can be re-enabled if desired.

The following SSH parameters are enabled by default:

The following algorithms are disabled by default in ExtremeXOS 22.5:

Upgrading to ExtremeXOS 22.5 and Later

When upgrading from earlier releases to ExtremeXOS 22.5, supported ciphers, MACs, public key algorithms are inherited from the earlier releases.

Note

DSA (ssh-dss) related host key algorithms are not supported in both server and client in ExtremeXOS 22.5 and later. However, for backward compatibility, it is supported in the server after an upgrade to ExtremeXOS and later if DSA host key is present in the earlier release.