reprioritize etm macs

See: * #66 * https://stribika.github.io/2015/01/04/secure-secure-shell.html Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
dev-sec · Jan 13, 2015 · 286cece · 286cece
1 parent 621dea5
commit 286cece
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libraries/get_ssh_macs.rb b/libraries/get_ssh_macs.rb
@@ -34,7 +34,7 @@ def self.get_macs(node, weak_hmac)
         macs_59['weak'] = macs_59['default'] + ',hmac-sha1'
 
         macs_66 = {}
-        macs_66.default = 'hmac-sha2-512-etm@openssh.com,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-256,umac-128-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-ripemd160'
+        macs_66.default = 'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160'
         macs_66['weak'] = macs_66['default'] + ',hmac-sha1'
 
         # determine the mac for the operating system