Add 'stribika' configuration (for reference)

see https://stribika.github.io/2015/01/04/secure-secure-shell.html
2021-10-19 09:40:45 +02:00 · 2021-10-19 09:40:45 +02:00 · f12ec3e9e0
parent 9ff0979db4
commit f12ec3e9e0
1 changed files with 25 additions and 0 deletions
--- a/vars/ssh_stribika.yml
+++ b/vars/ssh_stribika.yml
@ -0,0 +1,25 @@
+
+ssh_hardening_opts:
+  KexAlgorithms:
+    - curve25519-sha256@libssh.org
+    - diffie-hellman-group-exchange-sha256
+  Ciphers:
+    - chacha20-poly1305@openssh.com
+    - aes256-gcm@openssh.com
+    - aes128-gcm@openssh.com
+    - aes256-ctr
+    - aes192-ctr
+    - aes128-ctr
+  MACs:
+    - hmac-sha2-512-etm@openssh.com
+    - hmac-sha2-256-etm@openssh.com
+    - umac-128-etm@openssh.com
+    - hmac-sha2-512
+    - hmac-sha2-256
+    - umac-128@openssh.com
+  HostKeyAlgorithms:
+    - ssh-ed25519-cert-v01@openssh.com
+    - ssh-rsa-cert-v01@openssh.com
+    - ssh-ed25519
+    - ssh-rsa
+