Differences

This shows you the differences between two versions of the page.

--- doc:appunti:linux:sa:debian_upgrade_11_12 [2025/06/24 11:51] – [Configuration with TLS] niccolo
+++ doc:appunti:linux:sa:debian_upgrade_11_12 [2025/07/07 15:42] (current) – [Accesso SSH a vecchie installazioni] niccolo
@@ Line 145: / Line 145: @@
 <code>
-The --cipher option should not be used any longer with OpenVPN 2.6 in TLS mode.
+# The --cipher option should not be used any longer with OpenVPN 2.6 in TLS mode.
 #cipher AES-256-CBC
-# Use --data-ciphers including AES-256-CBC to the default value e.g. for clients using OpenVPN 2.3.
+# Use --data-ciphers adding the AES-256-CBC to the default value, e.g. for OpenVPN 2.3 clients.
-data-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC
+data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
 # Use --data-ciphers-fallback for peers that are old or have negotiation disabled,
 # e.g. peers running OpenVPN 2.3 or older, or some embedded devices.
@@ Line 395: / Line 395: @@
 ssh \
     -o KexAlgorithms=+diffie-hellman-group1-sha1 \
-    -o HostKeyAlgorithms=+ssh-dss \
+    -o HostKeyAlgorithms=+ssh-dss,ssh-rsa \
     -o PubkeyAcceptedKeyTypes=+ssh-rsa \
     root@83.149.110.120