Bad ciphers on debian 7.0

[ghost]

/etc/ssh/sshd_config line 47: Bad SSH2 cipher spec 'aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes128-ctr,aes256-ctr,aes192-ctr'

/etc/ssh/sshd_config line 53: Bad SSH2 mac spec 'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160'

ssh -V
OpenSSH_6.0p1 Debian-4+deb7u1, OpenSSL 1.0.1e 11 Feb 2013

[arlimus]

Thank you, something is clearly mixed up on Debian. We'll have a look.

[arlimus]

There was an oustanding merge-request that fixes these issues in Debian. We have recently moved to a new test-suite for integration testing and this project was still missing the latest commit. Testing it now, expect the new release to be up shortly.

[arlimus]

We have just released a new version of ssh-hardening for chef: 1.0.1

• http://community.opscode.com/cookbooks/ssh-hardening
• https://github.com/TelekomLabs/chef-ssh-hardening/blob/1.0.1/CHANGELOG.md

This should resolve this issue. Please reopen this ticket if it's still not working.

Sorry for the inconvenience and thank you for reporting this issue!

[ghost]

Thank you, this fixed the issue for me.