Skip to content

Commit acc9fb5

Browse files
committed
remove options that only apply to SSH protocol version 1
In reference to feedback here: dev-sec/chef-ssh-hardening#57 Signed-off-by: Dominik Richter <[email protected]>
1 parent 3d95ded commit acc9fb5

File tree

1 file changed

+0
-6
lines changed

1 file changed

+0
-6
lines changed

manifests/server.pp

-6
Original file line numberDiff line numberDiff line change
@@ -164,10 +164,6 @@
164164
#
165165
'KexAlgorithms' => $kex,
166166

167-
# Lifetime and size of ephemeral version 1 server key
168-
'KeyRegenerationInterval' => '1h',
169-
'ServerKeyBits' => 2048,
170-
171167
# Authentication
172168
# --------------
173169

@@ -181,13 +177,11 @@
181177
'MaxStartups' => '10:30:100',
182178

183179
# Enable public key authentication
184-
'RSAAuthentication' => 'yes',
185180
'PubkeyAuthentication' => 'yes',
186181

187182
# Never use host-based authentication. It can be exploited.
188183
'IgnoreRhosts' => 'yes',
189184
'IgnoreUserKnownHosts' => 'yes',
190-
'RhostsRSAAuthentication' => 'no',
191185
'HostbasedAuthentication' => 'no',
192186

193187
# Disable password-based authentication, it can allow for

0 commit comments

Comments
 (0)