aboutsummaryrefslogtreecommitdiff
path: root/templates/sshd_config/FreeBSD.erb
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2013-07-16 15:26:56 -0300
committerSilvio Rhatto <rhatto@riseup.net>2013-07-16 15:26:56 -0300
commit443683c33df8c6c9a4d5766fdbc4ac2d92f0a67c (patch)
tree7c6de76de467bb0a6ee56d18a12334180d6d0a24 /templates/sshd_config/FreeBSD.erb
parent7834a2ff6e3cfced588d91896d4aa04126e210cd (diff)
downloadpuppet-sshd-443683c33df8c6c9a4d5766fdbc4ac2d92f0a67c.tar.gz
puppet-sshd-443683c33df8c6c9a4d5766fdbc4ac2d92f0a67c.tar.bz2
OpenSSH HMAC: SHA1 -> SHA2-512 (suggested by duraconf)
Diffstat (limited to 'templates/sshd_config/FreeBSD.erb')
-rw-r--r--templates/sshd_config/FreeBSD.erb2
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/sshd_config/FreeBSD.erb b/templates/sshd_config/FreeBSD.erb
index 090149b..81b7e10 100644
--- a/templates/sshd_config/FreeBSD.erb
+++ b/templates/sshd_config/FreeBSD.erb
@@ -153,7 +153,7 @@ AllowGroups <%= s %>
<% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%>
Ciphers aes256-ctr
-MACs hmac-sha1
+MACs hmac-sha2-512
<% end -%>
<% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%>