sshlabs
sshlabs copied to clipboard
stribika
SSH configuration analysis
I tried to run the tests in an isolated environment (*e.g* a docker container) as I do not want to run an ssh daemon on my dev machine. However, I...
The scanner flags it as a critical, because ssh-keygen thinks DH group 16 is not safe. Find out how and why DH group 16 is safe, then whitelist it.
Right now we are using the SSH_MSG_KEX_DH_GEX_REPLY message to get the public key but different key exchange methods use different messages. This means we can't detect an RSA512 host key...