tree 549397433dc8c40dc6960d1bdbf32bb7c197f9d7
parent 8c01c500cdfb3b71294e1b6eea60c0d9dbb8124c
author Joseph Reynolds <jrey@us.ibm.com> 1539114795 -0500
committer Brad Bishop <bradleyb@fuzziesquirrel.com> 1540985601 -0400

Dropbear SSH remove HMAC-MD5

The Dropbear SSH client and server configuration is changed to not
accept the HMAC-MD5 algorithm when making connections.
The MD5 algorithm is no longer considered secure.

With this change, Dropbear supports the following MAC algorithms:
SHA1_HMAC, SHA2_256_HMAC, and SHA2_512_HMAC.
Note that Dropbear does not yet support HMAC-SHA3.

Tested:
  $ ssh -m hmac-sha1-96 root@${bmc}
  Unable to negotiate with ${bmc} port 22:
  no matching MAC found.
  Their offer: hmac-sha1,hmac-sha2-256,hmac-sha2-512
  $ ssh root@${bmc}  # worked

(From meta-phosphor rev: ec86af05553a7a66af68356cb2b4ec451d5bbf91)

Change-Id: Iba30c9f1ea66e2c72c75d16a16194ede808fe64a
Signed-off-by: Joseph Reynolds <jrey@us.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>