I've limited libssh's AES (in kex.c) to "aes256-ctr,aes192-ctr,aes128-ctr".

In my ssh server implementation I create a server bind & session and want to 
dynamically add "aes256-cbc,aes192-cbc,aes128-cbc".

I figured I could call ssh_options_set(session, SSH_OPTIONS_CIPHERS_C_S, 
ciphers) where ciphers is "aes256-cbc,aes192-cbc,aes128-cbc". The function call 
appears ineffectual in allowing clients to connect with the new cipher 
spec--the server gives me the following:

"no matching cipher found:
client aes256-cbc,aes192-cbc,aes128-cbc
server aes256-ctr,aes192-ctr,aes128-ctr"

Is it possible to dynamically set a session's SSH_OPTIONS_CIPHERS_C_S?

Mike

Reply via email to