Made host key algos configurable; dropped DSA

This commit is contained in:
Alexander Weidinger committed 2019-02-12 14:55:15 +01:00
1 parent 54dde36e53
commit 4b84dead8e
2 files changed
+5 -1

No files matched your search

+1 -1
View File
@@ -36,7 +36,7 @@ ssh_config:
{%- endif %}
{% endif %}
{%- for keyType in ['ecdsa', 'dsa', 'rsa', 'ed25519'] %}
{%- for keyType in openssh['host_key_algos'].split(',') %}
{%- set keyFile = "/etc/ssh/ssh_host_" ~ keyType ~ "_key" %}
{%- set keySize = salt['pillar.get']('openssh:generate_' ~ keyType ~ '_size', False) %}
{%- if salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %}