Editing Scanco User Instructions (section)

=== MAC Open SSH Authentication Issue ===
You might get an error similar to the following especially after a recent OS update:
  Unsupported KEX algorithm "+diffie-hellman-group1-sha1"
  command-line line 0: Bad SSH2 KexAlgorithms '+diffie-hellman-group1-sha1
This is not Apple’s fault, it’s OpenSSH version 7. SHA1 is weak, so support for it has been removed. Which is fine, but VMS clients are probably using RSA/SHA1. So until they’re all updated (i.e. never!) we need to re-enable SHA1.

Open a terminal windows and execute the following:
  sudo nano /etc/ssh/ssh_config
ENTER YOUR PASSWORD

Locate the line ‘# MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160′ and remove the Hash/Pound sight from the beginning.

Locate the line ‘# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc’ and remove the Hash/Pound sight from the beginning.

Then paste the following on the end;

  HostkeyAlgorithms ssh-dss,ssh-rsa
  KexAlgorithms +diffie-hellman-group1-sha1
There’s no reason to reboot, it should work straight away.
<br />


[[Image:Redirect.jpg|15px]] [[#top|''Return to Contents'']] or [[Main_Page|''Return to Main Page'']]