{"id":1609,"date":"2017-11-03T13:22:17","date_gmt":"2017-11-03T20:22:17","guid":{"rendered":"http:\/\/jim-zimmerman.com\/?p=1609"},"modified":"2017-11-03T13:22:31","modified_gmt":"2017-11-03T20:22:31","slug":"user-specific-sshsftpscp-customizations-in-centos","status":"publish","type":"post","link":"https:\/\/jim-zimmerman.com\/?p=1609","title":{"rendered":"User Specific ssh\/sftp\/scp Customizations in CentOS."},"content":{"rendered":"<p>I ran into a situation where I was trying to place files for support, and they only supported 3des ciphers (3des-cbc,blowfish-cbc,3des-cbc).  The global ssh client configuration on my system only supported aes ciphers.  Instead of adding the 3des to the global configuration (\/etc\/ssh\/ssh_config), I wanted to add it to just one account.  <\/p>\n<blockquote><p>$ vi ~\/.ssh\/config<br \/>\nCiphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,3des-cbc<\/p><\/blockquote>\n<blockquote><p>$ chmod 400 ~\/.ssh\/config<\/p><\/blockquote>\n<p>Then, I could run ssh\/sftp\/scp with -vvv to verify.  You should see the following output:<\/p>\n<blockquote><p>&#8230;<br \/>\ndebug2: ciphers ctos: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,3des-cbc<br \/>\ndebug2: ciphers stoc: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,3des-cbc<br \/>\n&#8230;<\/p><\/blockquote>\n<p>Of course, you can add any customization you want to the ~\/.ssh\/config file you want.  This is just an example.  What got me was the global config file is call ssh_config, while the user config file is called config.  man ssh_config help me discover the correct name.  If you do not have the correct name, you need to pass a -F <em>myspecialcustomconfigfile<\/em> to the ssh\/sftp\/scp command.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I ran into a situation where I was trying to place files for support, and they only supported 3des ciphers (3des-cbc,blowfish-cbc,3des-cbc). The global ssh client configuration on my system only supported aes ciphers. Instead of adding the 3des to the global configuration (\/etc\/ssh\/ssh_config), I wanted to add it to just one account. $ vi ~\/.ssh\/config [&#038;hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[317],"class_list":["post-1609","post","type-post","status-publish","format-standard","hentry","category-documentation","tag-ssh"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1609","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1609"}],"version-history":[{"count":1,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1609\/revisions"}],"predecessor-version":[{"id":1610,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1609\/revisions\/1610"}],"wp:attachment":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}