While we are upgrading our clusters, we noticed there are some legacy nodes that use very old version of
openssh. Our current SSH clients cannot talk to them. How do we temporary install weak cipher to upgrade those nodes?
Here are the command logs
[~] ssh email@example.com Unable to negotiate with 10.10.10.10 port 22: no matching cipher found. Their offer: arcfour,arcfour128,arcfour256
[~] ssh -Q cipher 3des-cbc aes128-cbc aes192-cbc aes256-cbc firstname.lastname@example.org aes128-ctr aes192-ctr aes256-ctr email@example.com firstname.lastname@example.org email@example.com
We have tried the following and it's not working.
[~] ssh -vv -c arcfour firstname.lastname@example.org Unknown cipher type 'arcfour'