aboutsummaryrefslogtreecommitdiff
path: root/templates
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2011-02-13 18:42:36 -0200
committerSilvio Rhatto <rhatto@riseup.net>2011-02-13 18:42:36 -0200
commitac30247bf9d7ea57c01cc5ad743e2788f6e8ea0d (patch)
treefd1cdb0f448fc3c642d40eefa52a83c27c26eafe /templates
parent505692a72e5c11f8bd52d726507cee8a91025183 (diff)
downloadpuppet-sshd-ac30247bf9d7ea57c01cc5ad743e2788f6e8ea0d.tar.gz
puppet-sshd-ac30247bf9d7ea57c01cc5ad743e2788f6e8ea0d.tar.bz2
Perfect forward secrecy config at squeeze template
Diffstat (limited to 'templates')
-rw-r--r--templates/sshd_config/Debian_squeeze.erb4
1 files changed, 4 insertions, 0 deletions
diff --git a/templates/sshd_config/Debian_squeeze.erb b/templates/sshd_config/Debian_squeeze.erb
index 56b1cab..d371ed1 100644
--- a/templates/sshd_config/Debian_squeeze.erb
+++ b/templates/sshd_config/Debian_squeeze.erb
@@ -202,3 +202,7 @@ AllowGroups <%= sshd_allowed_groups %>
<%= sshd_tail_additional_options %>
<%- end %>
+<%- if sshd_perfect_forward_secrecy.to_s == 'yes' then -%>
+Ciphers aes256-ctr
+MACs hmac-sha1
+<%- end %>