From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 430AC13877A for ; Wed, 25 Jun 2014 21:11:13 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id EBA6DE0A40; Wed, 25 Jun 2014 21:10:54 +0000 (UTC) Received: from postler.lichtfels.com (postler.lichtfels.com [78.46.92.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id D7039E09B7 for ; Wed, 25 Jun 2014 21:10:48 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by postler.lichtfels.com (Postfix) with ESMTP id 08D7F125D2 for ; Wed, 25 Jun 2014 23:10:47 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=xunil.at; s=mailout; t=1403730647; bh=Z6tAe89Eh/hHqjmuF3RQtV/TAcKi/DRRewSPO0er4yA=; h=Date:From:Reply-To:To:Subject:References:In-Reply-To; b=nyrhdqGJDomLIvc4iTmxLZd2OQzf58sdAR6TZS3UrKfkh89OXfO7AlDgTREIkODZm ytp9WwhUNooSK2/aozLWTHO+NTzMBqMDYJI5ivsf6j4GnoX7xdinOhFJoBmeTVnzyd /lPQsU2T/kW6JOnoDfUTFmC8XqyJcfpwO8xW8G5c= Received: from postler.lichtfels.com ([127.0.0.1]) by localhost (postler.lichtfels.com [127.0.0.1]) (amavisd-maia, port 10024) with LMTP id 10099-04 for ; Wed, 25 Jun 2014 23:10:45 +0200 (CEST) Received: from [IPv6:2001:15c0:65ff:8742:9075:f895:452:bed1] (unknown [IPv6:2001:15c0:65ff:8742:9075:f895:452:bed1]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by postler.lichtfels.com (Postfix) with ESMTPSA id E5015123CA for ; Wed, 25 Jun 2014 23:10:44 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=xunil.at; s=mailout; t=1403730645; bh=Z6tAe89Eh/hHqjmuF3RQtV/TAcKi/DRRewSPO0er4yA=; h=Date:From:Reply-To:To:Subject:References:In-Reply-To; b=yhuP8Epvx1o4ksJCeibWKqeToqeCDayWipviKr73pCrVD0Y5GGhENoUPEXj7Ka0cU A68WVWVuKWS5e6lyy7iZF3zyTQx6rqxbY2/3DKkDsRBYYIId20BPR5y+JApy9lfErB wlAWWpoKoBIEOy1PKwi//b1HNcsCsEO2MzHXMP6Y= Message-ID: <53AB3AD2.7020701@xunil.at> Date: Wed, 25 Jun 2014 23:10:42 +0200 From: "Stefan G. Weichinger" Organization: oops! User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: ssh rekeying slow ? References: <53AAA209.1000900@xunil.at> <53AB17C7.10001@xunil.at> <53AB27D1.3080401@gmail.com> In-Reply-To: <53AB27D1.3080401@gmail.com> X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: Maia Mailguard 1.0.2c X-Archives-Salt: df40dfa0-320e-409c-b921-7ffb12b05a3a X-Archives-Hash: 4599343ac5753402ca5007546bdd7792 Am 25.06.2014 21:49, schrieb Alan McKinnon: > I've also noticed slowdowns recently, I think it's the new ciphers likes > ecdsa. Try this: > > Connect using ssh -vvv and examine the output to find which of the > various ciphers and algorithms are used once connection is achieved. On > the client, add those configuration options for the server to > ssh_config. You should notice a speed up on the next attempt as unused > methods will be skipped > > man 5 ssh_config > > has all the details ;-) thanks, Alan. Did you already find out what options to set? Aside from that, I wonder why we as users have to do that and why it isn't set up "as good as possible" by the coders of openssh. I will see if I can figure out what to do ... Stefan