From 0dbeb647104f9e8bf717c686a5c7a1fb1e569984 Mon Sep 17 00:00:00 2001 From: Jake Howard Date: Tue, 28 Jan 2020 20:56:07 +0000 Subject: [PATCH] Add recommend key exchange --- ansible/roles/ssh/files/sshd_config | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ansible/roles/ssh/files/sshd_config b/ansible/roles/ssh/files/sshd_config index ff0cc11..dcedda2 100644 --- a/ansible/roles/ssh/files/sshd_config +++ b/ansible/roles/ssh/files/sshd_config @@ -58,9 +58,9 @@ Ciphers aes256-ctr,aes128-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-gcm@opens # Key Exchange algorithms (Elliptic Curve Diffie-Hellman) # DH-SHA-256 included for compat with PuTTY-WinCrypt clients -KexAlgorithms diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org +KexAlgorithms diffie-hellman-group18-sha512,curve25519-sha256@libssh.org -# Don’t read the user’s ~/.rhosts and ~/.shosts files +# Don’t read the user’s ~/.rhosts and ~/.shosts files IgnoreRhosts yes # Disable unused authentication schemes @@ -74,7 +74,7 @@ UsePAM no # X11 support X11Forwarding no -# Don’t show Message of the Day +# Don’t show Message of the Day PrintMotd yes # TCPKeepAlive (non-tunneled, disabled)