aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2014-08-19 13:57:43 -0300
committerSilvio Rhatto <rhatto@riseup.net>2014-08-19 13:57:43 -0300
commit7259d7ec8940f327d70ebc906e62bb3dc0283e36 (patch)
treeacebb346b1d02fe7aea4204a63eacac26cc41e82
parent0b3b27b577de7daf6c0259bd2190b33d8f624cb1 (diff)
downloadpuppet-sshd-7259d7ec8940f327d70ebc906e62bb3dc0283e36.tar.gz
puppet-sshd-7259d7ec8940f327d70ebc906e62bb3dc0283e36.tar.bz2
Back to hmac-sha1 on lenny/squeeze
-rw-r--r--templates/sshd_config/Debian_lenny.erb2
-rw-r--r--templates/sshd_config/Debian_squeeze.erb2
2 files changed, 2 insertions, 2 deletions
diff --git a/templates/sshd_config/Debian_lenny.erb b/templates/sshd_config/Debian_lenny.erb
index 3aaf974..75f8dc8 100644
--- a/templates/sshd_config/Debian_lenny.erb
+++ b/templates/sshd_config/Debian_lenny.erb
@@ -119,7 +119,7 @@ PrintMotd <%= scope.lookupvar('sshd::print_motd') %>
<% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%>
Ciphers aes256-ctr
-MACs hmac-sha2-512
+MACs MACs hmac-sha1
<% end -%>
<% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%>
diff --git a/templates/sshd_config/Debian_squeeze.erb b/templates/sshd_config/Debian_squeeze.erb
index 40040d1..ca8f3cc 100644
--- a/templates/sshd_config/Debian_squeeze.erb
+++ b/templates/sshd_config/Debian_squeeze.erb
@@ -115,7 +115,7 @@ AllowGroups <%= s %>
<% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%>
Ciphers aes256-ctr
-MACs hmac-sha2-512
+MACs MACs hmac-sha1
<% end -%>
<% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%>