Skip to content

Forcibly enable deprecated OpenSSH KEX algorithm

Summary

The latest releases of OpenSSH (starting with 8.2) do not offer diffie-hellman-group14-sha1 in the default list of key exchange protocols. This in turn breaks SSH access to all Android devices, which is not a good thing.

BUG: 417787

For a long-term solution, we'll need to migrate all clients to a new algorithm.

Merge request reports