From 443683c33df8c6c9a4d5766fdbc4ac2d92f0a67c Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Tue, 16 Jul 2013 15:26:56 -0300
Subject: OpenSSH HMAC: SHA1 -> SHA2-512 (suggested by duraconf)

---
 templates/sshd_config/FreeBSD.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates/sshd_config/FreeBSD.erb')

diff --git a/templates/sshd_config/FreeBSD.erb b/templates/sshd_config/FreeBSD.erb
index 090149b..81b7e10 100644
--- a/templates/sshd_config/FreeBSD.erb
+++ b/templates/sshd_config/FreeBSD.erb
@@ -153,7 +153,7 @@ AllowGroups <%= s %>
 
 <% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%>
 Ciphers aes256-ctr
-MACs hmac-sha1
+MACs hmac-sha2-512
 <% end -%>
 
 <% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%>
-- 
cgit v1.2.3