Just added these today and worked like a charm: esp_proposals = aes128-sha256-modp2048,aes128gcm16-modp2048 (I wanted to make sure an SHA algorithm was available too). Thanks!

Thanks for answering! If I understand well, if I do not specify anything (like I have done), the keys are derived, and therefore do not contain DH groups. If I want DH groups to be included I have to specify them explicitly. I have read the doc but I am not sure to understand why this only happens when rekeying, and not when establishing the first connection. Are the used algorithms different?

Have you tried a simple startx ?

Is there some way for you to retrieve the PID ? Like running top, typing L and then ssh ? Then you could kill -9 <pid>

If you need to run it twice, look at my answer below and use the -e argument

Hi Jhalak, if glenn's answer worked for you, maybe you should mark his answer as accepted?

That means the easiest way to get the list would be to run apt and dnf from a script and work with their output, I guess. Thanks !