Fix ssh kex [email protected] for openssh >= 8.5

fix #433

Signed-off-by: Benjamin <[email protected]>
Signed-off-by: Benjamin Boehm <[email protected]>

roles/ssh_hardening/tasks/crypto_kex.yml

@@ -13,3 +13,8 @@
   set_fact:
     ssh_kex: '{{ ssh_kex_80_default }}'
   when: sshd_version is version('8.0', '>=')
+
+- name: Set kex according to openssh-version if openssh >= 8.5
+  set_fact:
+    ssh_kex: '{{ ssh_kex_85_default }}'
+  when: sshd_version is version('8.5', '>=')

roles/ssh_hardening/vars/main.yml

@@ -50,3 +50,8 @@ ssh_kex_80_default:
   - [email protected]
   - [email protected]
   - diffie-hellman-group-exchange-sha256
+
+ssh_kex_85_default:
+  - [email protected]
+  - [email protected]
+  - diffie-hellman-group-exchange-sha256