From b282fec1aa05246ed3482270eb70fc3ec5f39a00 Mon Sep 17 00:00:00 2001 From: "dtucker@openbsd.org" Date: Tue, 26 May 2015 23:23:40 +0000 Subject: upstream commit Cap DH-GEX group size at 4kbits for Cisco implementations. Some of them will choke when asked for preferred sizes >4k instead of returning the 4k group that they do have. bz#2209, ok djm@ Upstream-ID: 54b863a19713446b7431f9d06ad0532b4fcfef8d --- compat.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'compat.h') diff --git a/compat.h b/compat.h index 83507f07..2be290a8 100644 --- a/compat.h +++ b/compat.h @@ -1,4 +1,4 @@ -/* $OpenBSD: compat.h,v 1.47 2015/04/10 05:16:50 dtucker Exp $ */ +/* $OpenBSD: compat.h,v 1.48 2015/05/26 23:23:40 dtucker Exp $ */ /* * Copyright (c) 1999, 2000, 2001 Markus Friedl. All rights reserved. @@ -61,6 +61,7 @@ #define SSH_BUG_DYNAMIC_RPORT 0x08000000 #define SSH_BUG_CURVE25519PAD 0x10000000 #define SSH_BUG_HOSTKEYS 0x20000000 +#define SSH_BUG_DHGEX_LARGE 0x40000000 void enable_compat13(void); void enable_compat20(void); -- cgit v1.2.1