How to harden SSH on CentOS 6.5
I have a new (first time) CentOS 6.5 server being used for a web server. Our security team has identified the following weakness:
The SSH server is configured to allow either MD5 or 96-bit MAC algorithms, both of which are considered weak. Note that this plugin only checks for the options of the SSH server and does not check for vulnerable software versions.
Plugin Output The following client-to-server Method Authentication Code (MAC) algorithms are supported : hmac-md5 hmac-md5-96 hmac-sha1-96
How do I disable MD5 and/or 96-bit MAC algorithms on a CentOS 6.5 server? I tried running: authconfig –disablemd5 –updateall but still had the same issue.