Files
ansible-collection-hardening/roles/ssh_hardening/tasks/crypto_kex.yml
T
Sebastian Gumprich bb588bd777 linting (#603)
* linting

Signed-off-by: Sebastian Gumprich <[email protected]>

* more linting

Signed-off-by: Sebastian Gumprich <[email protected]>

* change line length issues

Signed-off-by: Sebastian Gumprich <[email protected]>

* replace yes with true in tasks

Signed-off-by: Sebastian Gumprich <[email protected]>

* use manual line-wrapping because ansible-lint does not support it correctly.

see https://github.com/ansible/ansible-lint/issues/2522

* use manual line-wrapping because ansible-lint does not support it correctly.

see https://github.com/ansible/ansible-lint/issues/2522

Signed-off-by: Sebastian Gumprich <[email protected]>

* use manual line-wrapping because ansible-lint does not support it correctly.

see https://github.com/ansible/ansible-lint/issues/2522

Signed-off-by: Sebastian Gumprich <[email protected]>

* add exception for task

Signed-off-by: Sebastian Gumprich <[email protected]>

* remove trailing whitespace

* add back deleted params

Signed-off-by: Sebastian Gumprich <[email protected]>

* add back deleted params

Signed-off-by: Sebastian Gumprich <[email protected]>

* add back tasks

Signed-off-by: Sebastian Gumprich <[email protected]>
2023-01-24 12:40:27 +01:00

21 lines
711 B
YAML

---
- name: Set kex according to openssh-version if openssh >= 5.9
ansible.builtin.set_fact:
ssh_kex: "{{ ssh_kex_59_default }}"
when: sshd_version is version('5.9', '>=')
- name: Set kex according to openssh-version if openssh >= 6.6
ansible.builtin.set_fact:
ssh_kex: "{{ ssh_kex_66_default }}"
when: sshd_version is version('6.6', '>=')
- name: Set kex according to openssh-version if openssh >= 8.0
ansible.builtin.set_fact:
ssh_kex: "{{ ssh_kex_80_default }}"
when: sshd_version is version('8.0', '>=')
- name: Set kex according to openssh-version if openssh >= 8.5
ansible.builtin.set_fact:
ssh_kex: "{{ ssh_kex_85_default }}"
when: sshd_version is version('8.5', '>=')