diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2011-02-13 18:42:36 -0200 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2011-02-13 18:42:36 -0200 |
| commit | ac30247bf9d7ea57c01cc5ad743e2788f6e8ea0d (patch) | |
| tree | fd1cdb0f448fc3c642d40eefa52a83c27c26eafe | |
| parent | 505692a72e5c11f8bd52d726507cee8a91025183 (diff) | |
| download | puppet-sshd-ac30247bf9d7ea57c01cc5ad743e2788f6e8ea0d.tar.gz puppet-sshd-ac30247bf9d7ea57c01cc5ad743e2788f6e8ea0d.tar.bz2 | |
Perfect forward secrecy config at squeeze template
| -rw-r--r-- | templates/sshd_config/Debian_squeeze.erb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/templates/sshd_config/Debian_squeeze.erb b/templates/sshd_config/Debian_squeeze.erb index 56b1cab..d371ed1 100644 --- a/templates/sshd_config/Debian_squeeze.erb +++ b/templates/sshd_config/Debian_squeeze.erb @@ -202,3 +202,7 @@ AllowGroups <%= sshd_allowed_groups %> <%= sshd_tail_additional_options %> <%- end %> +<%- if sshd_perfect_forward_secrecy.to_s == 'yes' then -%> +Ciphers aes256-ctr +MACs hmac-sha1 +<%- end %> |