SSH Reference Manual

CIPCOMPATERROR
In case there is no support for DEFINEs in the kernel (older OS releases), then a PARAM CIPCOMPATERROR can be
set to SUPPRESS for a kernel process.
Parameter Syntax
CIPCOMPATERROR { SUPPRESS | * }
Arguments
SUPPRESS
DEFINE =CIP^COMPAT^ERROR will be set to SUPPRESS.
*
DEFINE =CIP^COMPAT^ERROR will not be set.
Default
The default for this parameter is *.
Considerations
Use this parameter to pass the value for the DEFINE =TCPIP^RESOLVER^NAME parameter to SSH2 servers
configured as generic processes. This can also be achieved by adding the define =TCPIP^RESOLVER^NAME for the
generic process (possible since G06.28/H06.06).
An existing DEFINE =CIP^COMPAT^ERROR passed to the SSH2 process at startup will remain in effect.
CIPHERS
Use this parameter to specify which cipher suites are admissible for the SSH2 server.
Parameter Syntax
CIPHERS suite [, suite, ...]
Arguments
suite
Specifies a cipher suite. Currently the following cipher suites are supported by SSH2:
o aes256-cbc: AES (Rijndael) in CBC mode, with 256-bit key
o aes128-cbc: AES with 128-bit key
o twofish256-cbc: Twofish in CBC mode, with 256-bit key
o twofish128-cbc: Twofish with 128-bit key
o twofish-cbc: alias for "twofish256-cbc" (Note: this is being retained for historical reasons)
o blowfish-cbc: Blowfish in CBC mode
o 3des-cbc: three-key 3DES in CBC mode
o arcfour: the ARCFOUR stream cipher
o cast128-cbc: CAST-128 in CBC mode
Considerations
For details about the ciphers listed above, please refer to standard SSH documentation, such as the manual for the RFCs
available.
68 • Configuring and Running SSH2 HP NonStop SSH Reference Manual