darcs repository web UI and hosting app. This is the main darcsden trunk, which also runs hub.darcs.net. (https://hub.darcs.net)

#179CBC ciphers disabled in OpenSSH 7.6

The past days I had trouble pushing to and pulling from DarcsHub. Some debugging and research revealed that OpenSSH 7.6 disabled the CBC cipher set (https://www.openssh.com/txt/release-7.6).

Darcs' error message: darcs failed: Not a repository: enum@hub.darcs.net:enum/twitbtw (The program "scp enum@hub.darcs.net:enum/twitbtw/_darcs/inventory ./darcs1957747793424238335" failed with error: "Unable to negotiate with 173.255.219.222 port 22: no matching cipher found. Their offer: aes256-cbc,aes192-cbc,aes128-cbc".)

From ssh -G: ciphers chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com

Workaround for users: Manually allow aes256-cbc in ~/.ssh/config. On the long term, CTR or GCM ciphers should be implemented for DarcsDen.