Fixing CBC Weak Chipper SSH

On Linux :

#vi /etc/ssh/sshd_config

add line this :

Ciphers [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected]

restart service ssh

testing :

ssh -vv -oCiphers=aes128-cbc,3des-cbc,blowfish-cbc [user@localhost]

On Solaris :

#vi /etc/ssh/sshd_config

add line this :

Ciphers aes128-ctr,aes192-ctr,aes256-ctr
Macs hmac-sha2-256,hmac-sha2-512

restart service ssh

#svcadm restart svc:/network/ssh