From bafbf5dabab674fd4786d3fffe4847f4fea6ceac Mon Sep 17 00:00:00 2001 From: coolneng Date: Wed, 31 Mar 2021 10:08:58 +0200 Subject: [PATCH] Allow legacy MACs and KexAlgorithms for CentOS VM --- configuration.nix | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/configuration.nix b/configuration.nix index 7313ab3..ff35380 100644 --- a/configuration.nix +++ b/configuration.nix @@ -57,6 +57,20 @@ services.openssh = { enable = true; permitRootLogin = "yes"; + macs = [ + "hmac-sha2-512-etm@openssh.com" + "hmac-sha2-256-etm@openssh.com" + "umac-128-etm@openssh.com" + "hmac-sha2-512" + "hmac-sha2-256" + "umac-128@openssh.com" + "hmac-sha1" + ]; + kexAlgorithms = [ + "curve25519-sha256@libssh.org" + "diffie-hellman-group-exchange-sha256" + "diffie-hellman-group1-sha1" + ]; }; # Create coace user