Ansible/ssh-hardening
1
0
Fork 0
Code Issues 9 Pull requests 1 Projects Releases Wiki Activity

Add 'stribika' configuration (for reference)

Browse source 
see https://stribika.github.io/2015/01/04/secure-secure-shell.html
This commit is contained in:
Sven Velt 2021-10-19 09:40:45 +02:00
parent 9ff0979db4
commit f12ec3e9e0
1 changed files with 25 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
vars/ssh_stribika.yml Normal file
View file

@ -0,0 +1,25 @@
ssh_hardening_opts:
KexAlgorithms:
- curve25519-sha256@libssh.org
- diffie-hellman-group-exchange-sha256
Ciphers:
- chacha20-poly1305@openssh.com
- aes256-gcm@openssh.com
- aes128-gcm@openssh.com
- aes256-ctr
- aes192-ctr
- aes128-ctr
MACs:
- hmac-sha2-512-etm@openssh.com
- hmac-sha2-256-etm@openssh.com
- umac-128-etm@openssh.com
- hmac-sha2-512
- hmac-sha2-256
- umac-128@openssh.com
HostKeyAlgorithms:
- ssh-ed25519-cert-v01@openssh.com
- ssh-rsa-cert-v01@openssh.com
- ssh-ed25519
- ssh-rsa