systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 21 Activity Actions

Add recommend key exchange

Browse source
This commit is contained in:
Jake Howard 2020-01-28 20:56:07 +00:00
parent 14b7b6d2ef
commit 0dbeb64710
Signed by: jake
GPG key ID: 57AFB45680EDD477
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ansible/roles/ssh/files/sshd_config
View file

@ -58,9 +58,9 @@ Ciphers aes256-ctr,aes128-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-gcm@opens
# Key Exchange algorithms (Elliptic Curve Diffie-Hellman) # Key Exchange algorithms (Elliptic Curve Diffie-Hellman)
# DH-SHA-256 included for compat with PuTTY-WinCrypt clients # DH-SHA-256 included for compat with PuTTY-WinCrypt clients
KexAlgorithms diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org KexAlgorithms diffie-hellman-group18-sha512,curve25519-sha256@libssh.org
# Don’t read the user’s ~/.rhosts and ~/.shosts files # Don’t read the user’s ~/.rhosts and ~/.shosts files
IgnoreRhosts yes IgnoreRhosts yes
# Disable unused authentication schemes # Disable unused authentication schemes
@ -74,7 +74,7 @@ UsePAM no
# X11 support # X11 support
X11Forwarding no X11Forwarding no
# Don’t show Message of the Day # Don’t show Message of the Day
PrintMotd yes PrintMotd yes
# TCPKeepAlive (non-tunneled, disabled) # TCPKeepAlive (non-tunneled, disabled)