andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Regenerate RSA key with size 4096 bits (#376)

Browse Source 
* regenerate RSA key with size 4096 bits

Signed-off-by: Sina Tak Tehrani <[email protected]>

* fixed lint problem

Signed-off-by: Sina Tak Tehrani <[email protected]>

* fixed E301 lint error

Signed-off-by: Sina Tak Tehrani <[email protected]>

* added host keys related vars

Signed-off-by: Sina Tak Tehrani <[email protected]>

* used openssh_keypair module

Signed-off-by: Sina Tak Tehrani <[email protected]>

* changed RSA private key mode to 0640

Signed-off-by: Sina Tak Tehrani <[email protected]>

* specified condition to prevent wrong file mode on debian-based OS

Signed-off-by: Sina Tak Tehrani <[email protected]>
This commit is contained in:
Sina Tak Tehrani authored and GitHub committed 2021-01-21 13:38:48 +01:00
1 parent f010b9a17e
commit ef31838fa2
10 files changed
+37
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/ssh_hardening/vars/SmartOS.yml
+2
View File
@@ -4,6 +4,8 @@ ssh_host_keys_dir: '/var/ssh'
sshd_service_name: ssh
ssh_owner: root
ssh_group: root
ssh_host_keys_owner: 'root'
ssh_host_keys_group: 'root'
# true if SSH support Kerberos
ssh_kerberos_support: true