From 75105d66d89671943a1eb1f37573b4e63dd33919 Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Wed, 23 Feb 2011 14:40:02 -0300 Subject: Adding sshd_use_strong_ciphers to all sshd_config templates --- templates/sshd_config/CentOS.erb | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'templates/sshd_config/CentOS.erb') diff --git a/templates/sshd_config/CentOS.erb b/templates/sshd_config/CentOS.erb index 544effe..f2ad175 100644 --- a/templates/sshd_config/CentOS.erb +++ b/templates/sshd_config/CentOS.erb @@ -207,3 +207,8 @@ AllowGroups <%= sshd_allowed_groups %> <%- unless sshd_tail_additional_options.to_s.empty? then %> <%= sshd_tail_additional_options %> <%- end %> + +<%- if sshd_use_strong_ciphers.to_s == 'yes' then -%> +Ciphers aes128-ctr +MACs hmac-sha1 +<%- end %> -- cgit v1.2.3