Added DH primes to default KEX algorithms for SshConfigFileReader
@@ -116,6 +116,11 @@ public final class SshConfigFileReader {
public static final String DEFAULT_KEX_ALGORITHMS =
"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521"
+ "," + "diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1"
+ // RFC-8268 groups
+ + "," + "diffie-hellman-group18-sha512,diffie-hellman-group17-sha512"
+ + "," + "diffie-hellman-group16-sha512,diffie-hellman-group15-sha512"
+ + "," + "diffie-hellman-group14-sha256"
+ // Legacy groups
+ "," + "diffie-hellman-group14-sha1,diffie-hellman-group1-sha1";
// see http://linux.die.net/man/5/ssh_config
public static final String HOST_KEY_ALGORITHMS_CONFIG_PROP = "HostKeyAlgorithms";
