andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix ssh kex [email protected] for openssh >= 8.5

Browse Source 
fix #433

Signed-off-by: Benjamin <[email protected]>
Signed-off-by: Benjamin Boehm <[email protected]>
This commit is contained in:
Benjamin authored and Benjamin Boehm committed 2021-04-01 02:08:24 +02:00
1 parent d758fa5184
commit 29ee683069
2 files changed
+10
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/ssh_hardening/tasks/crypto_kex.yml
+5
View File
@@ -13,3 +13,8 @@
set_fact: set_fact:
ssh_kex: '{{ ssh_kex_80_default }}' ssh_kex: '{{ ssh_kex_80_default }}'
when: sshd_version is version('8.0', '>=') when: sshd_version is version('8.0', '>=')
- name: Set kex according to openssh-version if openssh >= 8.5
set_fact:
ssh_kex: '{{ ssh_kex_85_default }}'
when: sshd_version is version('8.5', '>=')
roles/ssh_hardening/vars/main.yml
+5
View File
@@ -50,3 +50,8 @@ ssh_kex_80_default:
- [email protected] - [email protected]
- [email protected] - [email protected]
- diffie-hellman-group-exchange-sha256 - diffie-hellman-group-exchange-sha256
ssh_kex_85_default:
- [email protected]
- [email protected]
- diffie-hellman-group-exchange-sha256