1 files changed, 52 insertions, 24 deletions

diff --git a/lib/ssh/src/ssh_options.erl b/lib/ssh/src/ssh_options.erl
index 0886d5b34d..12c0190082 100644
--- a/lib/ssh/src/ssh_options.erl
+++ b/lib/ssh/src/ssh_options.erl
@@ -293,12 +293,6 @@ default(server) ->
             class => user_options
            },
 
-      {auth_methods, def} =>
-          #{default => ?SUPPORTED_AUTH_METHODS,
-            chk => fun check_string/1,
-            class => user_options
-           },
-
       {auth_method_kb_interactive_data, def} =>
           #{default => undefined, % Default value can be constructed when User is known
             chk => fun({S1,S2,S3,B}) ->
@@ -398,6 +392,12 @@ default(server) ->
             class => user_options
            },
 
+      {preferred_algorithms, def} =>
+          #{default => ssh:default_algorithms(),
+            chk => fun check_preferred_algorithms/1,
+            class => user_options
+           },
+
 %%%%% Undocumented
       {infofun, def} =>
           #{default => fun(_,_,_) -> void end,
@@ -436,12 +436,24 @@ default(client) ->
            },
 
       {pref_public_key_algs, def} =>
-          #{default => 
-                ssh_transport:supported_algorithms(public_key),
-            chk => 
-                fun check_pref_public_key_algs/1,
-            class =>
-                ssh
+          #{default => ssh_transport:default_algorithms(public_key) -- ['rsa-sha2-256',
+                                                                        'rsa-sha2-512'],
+            chk => fun check_pref_public_key_algs/1,
+            class => user_options
+           },
+
+      {preferred_algorithms, def} =>
+          #{default => [{K,Vs} || {K,Vs0} <- ssh:default_algorithms(),
+                                  Vs <- [case K of
+                                             public_key -> 
+                                                 Vs0 -- ['rsa-sha2-256',
+                                                         'rsa-sha2-512'];
+                                             _ ->
+                                                 Vs0
+                                         end]
+                       ],
+            chk => fun check_preferred_algorithms/1,
+            class => user_options
            },
 
       {dh_gex_limits, def} =>
@@ -509,12 +521,6 @@ default(common) ->
              class => user_options
             },
 
-       {preferred_algorithms, def} =>
-           #{default => ssh:default_algorithms(),
-             chk => fun check_preferred_algorithms/1,
-             class => user_options
-            },
-
        {id_string, def} => 
            #{default => undefined, % FIXME: see ssh_transport:ssh_vsn/0
              chk => fun(random) -> 
@@ -582,6 +588,21 @@ default(common) ->
             class => user_options
            },
 
+      {auth_methods, def} =>
+          #{default => ?SUPPORTED_AUTH_METHODS,
+            chk => fun(As) ->
+                           try
+                               Sup = string:tokens(?SUPPORTED_AUTH_METHODS, ","),
+                               New = string:tokens(As, ","),
+                               [] == [X || X <- New,
+                                           not lists:member(X,Sup)]
+                           catch
+                               _:_ -> false
+                           end
+                   end,
+            class => user_options
+           },
+
 %%%%% Undocumented
        {transport, def} =>
            #{default => ?DEFAULT_TRANSPORT,
@@ -808,16 +829,23 @@ valid_hash(X,  _) -> error_in_check(X, "Expect atom or list in fingerprint spec"
 
 %%%----------------------------------------------------------------
 check_preferred_algorithms(Algs) ->
+    [error_in_check(K,"Bad preferred_algorithms key")
+     || {K,_} <- Algs,
+        not lists:keymember(K,1,ssh:default_algorithms())],
+
     try alg_duplicates(Algs, [], [])
     of
 	[] ->
 	    {true,
-	     [try ssh_transport:supported_algorithms(Key)
-	      of
-		  DefAlgs -> handle_pref_alg(Key,Vals,DefAlgs)
-	      catch
-		  _:_ -> error_in_check(Key,"Bad preferred_algorithms key")
-	      end  || {Key,Vals} <- Algs]
+	     [case proplists:get_value(Key, Algs) of
+                  undefined ->
+                      {Key,DefAlgs};
+                  Vals ->
+                      handle_pref_alg(Key,Vals,SupAlgs)
+              end
+	      || {{Key,DefAlgs}, {Key,SupAlgs}} <- lists:zip(ssh:default_algorithms(),
+                                                             ssh_transport:supported_algorithms())
+             ]
 	    };
 
 	Dups ->