adds support to harden sshd_config (KeyExchange, Ciphers, MACs)

2026-09-19 02:44:46 +02:00 · 2015-06-30 14:33:57 +02:00
parent bec4a2a77e
commit 83bb5ac5a0
2 changed files with 14 additions and 1 deletions
@@ -45,6 +45,10 @@ sshd_config:
        X11Forwarding: no
        AllowTcpForwarding: no
        ForceCommand: internal-sftp
+  # Check `man sshd_config` for supported KexAlgorithms, Ciphers and MACs first.
+  KexAlgorithms: 'diffie-hellman-group14-sha1,diffie-hellman-group1-sha1'
+  Ciphers: 'aes128-ctr,aes256-ctr'
+  MACs: 'hmac-sha1'

 openssh:
  auth: