andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added: support for HostCertificate in sshd conf file

Browse Source 
Signed-off-by: Maximilian Praeger <[email protected]>
This commit is contained in:
Maximilian Praeger committed 2021-01-22 07:24:53 +01:00
1 parent ef31838fa2
commit 6e9247bde3
1 file changed
+6
Download Patch File Download Diff File Expand all files Collapse all files
roles/ssh_hardening/templates/opensshd.conf.j2
+6
View File
@@ -38,6 +38,12 @@ ListenAddress {{ address }}
HostKey {{ key }} HostKey {{ key }}
{% endfor %} {% endfor %}
{% if ssh_host_certificates -%}
{% for certificate in ssh_host_certificates -%}
HostCertificate {{ certificate }}
{% endfor -%}
{% endif -%}
# Host key algorithms that the server offers. # Host key algorithms that the server offers.
{% if sshd_version is version('5.8', '>=') %} {% if sshd_version is version('5.8', '>=') %}
{{ "HostKeyAlgorithms " ~ ssh_host_key_algorithms|join(',') if ssh_host_key_algorithms else "HostKeyAlgorithms"|comment }} {{ "HostKeyAlgorithms " ~ ssh_host_key_algorithms|join(',') if ssh_host_key_algorithms else "HostKeyAlgorithms"|comment }}