1 #

     2 # hmac-sha1 is heavily used in the world, and customers updating openssh should 

     3 # not be afraid that updating will make hmac-sha1 become non-default

     4 # without notice to them when in fact it is still enabled for sshd by default.

     5 #

     6 # This patch will be submitted upstream.  If the omission was deliberate, as

     7 # part of a deprecation process, then we can decide at that time how to 

     8 # notify customers of the upcoming deprecation.

     9 # 

    10 

    11 diff -rupN old/sshd_config.5 new/sshd_config.5

    12 --- old/sshd_config.5	2016-01-28 13:47:34.630632408 -0800

    13 +++ new/sshd_config.5	2016-01-28 13:48:34.129479936 -0800

    14 @@ -1018,7 +1018,7 @@ The default is:

    15  [email protected],[email protected],

    16  [email protected],[email protected],

    17  [email protected],[email protected],

    18 -hmac-sha2-256,hmac-sha2-512

    19 +hmac-sha2-256,hmac-sha2-512,hmac-sha1

    20  .Ed

    21  .Pp

    22  The list of available MAC algorithms may also be obtained using the