Merge pull request #437 from BenjaminBoehm/bugfix/ssh-kex-sntrup-openssh8.5

Fix ssh kex [email protected] for openssh >= 8.5

roles/ssh_hardening/tasks/crypto_kex.yml

@@ -13,3 +13,8 @@
   set_fact:
     ssh_kex: '{{ ssh_kex_80_default }}'
   when: sshd_version is version('8.0', '>=')
+
+- name: Set kex according to openssh-version if openssh >= 8.5
+  set_fact:
+    ssh_kex: '{{ ssh_kex_85_default }}'
+  when: sshd_version is version('8.5', '>=')

roles/ssh_hardening/vars/main.yml

@@ -50,3 +50,8 @@ ssh_kex_80_default:
   - [email protected]
   - [email protected]
   - diffie-hellman-group-exchange-sha256
+
+ssh_kex_85_default:
+  - [email protected]
+  - [email protected]
+  - diffie-hellman-group-exchange-sha256