Confirmed users
502
edits
Security/Guidelines/OpenSSH: Difference between revisions
Jump to navigation
Jump to search
https://github.com/mozilla/wikimo_opsec/commit/a815077e89c1bcc04878f2c92b43f1e957d67816#diff-d358013794c93b4f7a5a16fb31ba20d4
JanZerebecki (talk | contribs) (→Modern: remove duplicate Ciphers line) |
Gdestuynder (talk | contribs) (https://github.com/mozilla/wikimo_opsec/commit/a815077e89c1bcc04878f2c92b43f1e957d67816#diff-d358013794c93b4f7a5a16fb31ba20d4) |
||
| Line 10: | Line 10: | ||
|- | |- | ||
| <span style="color:green;">'''READY'''</span> || | | <span style="color:green;">'''READY'''</span> || | ||
* Version 1.9: kang: updates for OpenSSH 7 | |||
* Version 1.8: kang/[[User:JanZerebecki|JanZerebecki]]: default to AES-GCM since AES-CTR also disclose packet length. | * Version 1.8: kang/[[User:JanZerebecki|JanZerebecki]]: default to AES-GCM since AES-CTR also disclose packet length. | ||
* Version 1.7: kang/[[User:JanZerebecki|JanZerebecki]]: fix HostKeyAlg order typo in modern ([https://wiki.mozilla.org/index.php?title=Security%2FGuidelines%2FOpenSSH&diff=1059156&oldid=1059151 diff]) | * Version 1.7: kang/[[User:JanZerebecki|JanZerebecki]]: fix HostKeyAlg order typo in modern ([https://wiki.mozilla.org/index.php?title=Security%2FGuidelines%2FOpenSSH&diff=1059156&oldid=1059151 diff]) | ||
| Line 191: | Line 192: | ||
HashKnownHosts yes | HashKnownHosts yes | ||
# Host keys the client accepts - order here is honored by OpenSSH | # Host keys the client accepts - order here is honored by OpenSSH | ||
HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01 | HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256 | ||
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp256,ecdh-sha2-nistp384,diffie-hellman-group-exchange-sha256 | KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp256,ecdh-sha2-nistp384,diffie-hellman-group-exchange-sha256 | ||
| Line 206: | Line 207: | ||
HashKnownHosts yes | HashKnownHosts yes | ||
# Host keys the client accepts - order here is honored by OpenSSH | # Host keys the client accepts - order here is honored by OpenSSH | ||
HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01 | HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256 | ||
</source> | </source> | ||