Disable SSH Server Weak Ciphers and CBC Mode Ciphers in Linux
February 23, 2022
Its easy to fix this weak ciphers being flagged by the security team, below is how to do it.
nano /etc/ssh/sshd_config
Ciphers aes128-ctr,aes192-ctr,aes256-ctr
Save the file and restart the service as below
service sshd restart
you can very what you have done by
sshd -T |grep ciphers
Posted in Vulnerability Remediation