Merge pull request #53 from pdomagala/update-ssh-algorithms

chore(sshd): exclude deprecated SSHv2 key exchange algorithms
teamhephy · Dec 6, 2019 · 75e37c0 · 75e37c0
2 parents 5fe6b14 + 705f203
commit 75e37c0
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/rootfs/etc/ssh/sshd_config b/rootfs/etc/ssh/sshd_config
@@ -6,7 +6,7 @@ UsePrivilegeSeparation yes
 KeyRegenerationInterval 3600
 ServerKeyBits 768
 SyslogFacility AUTH
-LogLevel INFO
+LogLevel VERBOSE
 LoginGraceTime 120
 PermitRootLogin yes
 StrictModes yes
@@ -26,3 +26,6 @@ TCPKeepAlive yes
 #AcceptEnv LANG LC_*
 Subsystem sftp /usr/lib/openssh/sftp-server
 UseDNS no
+Ciphers [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr
+KexAlgorithms [email protected],ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
+MACs [email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,[email protected]