TrueCloudLab/rclone
16
0
Fork 4
Code Issues 1 Pull requests Projects Releases 4 Packages Wiki Activity Actions

sftp: add option to enable the use of aes128-cbc cipher

Browse source
This commit is contained in:
Jon Fautley 2017-12-08 12:22:09 +00:00 • committed by Nick Craig-Wood
parent f424019380
commit 3684585104
2 changed files with 26 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/content/sftp.md
View file

@ -154,6 +154,13 @@ or `sha1sum` as well as `echo` are in the remote's PATH.
The only ssh agent supported under Windows is Putty's pageant.
The Go SSH library disables the use of the aes128-cbc cipher by
default, due to security concerns. This can be re-enabled on a
per-connection basis by setting the `use_insecure_cipher` setting in
the configuration file to `true`. Further details on the insecurity of
this cipher can be found [in this paper]
(http://www.isg.rhul.ac.uk/~kp/SandPfinal.pdf).
SFTP isn't supported under plan9 until [this
issue](https://github.com/pkg/sftp/issues/156) is fixed.