From 0b3b27b577de7daf6c0259bd2190b33d8f624cb1 Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Tue, 19 Aug 2014 13:40:41 -0300 Subject: Back to OpenSSH HMAC: SHA1 -> SHA2-512 (suggested by duraconf) --- templates/sshd_config/Ubuntu_lucid.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'templates/sshd_config/Ubuntu_lucid.erb') diff --git a/templates/sshd_config/Ubuntu_lucid.erb b/templates/sshd_config/Ubuntu_lucid.erb index cc6e921..4d5f640 100644 --- a/templates/sshd_config/Ubuntu_lucid.erb +++ b/templates/sshd_config/Ubuntu_lucid.erb @@ -118,7 +118,7 @@ PrintMotd <%= scope.lookupvar('sshd::print_motd') %> <% if scope.lookupvar('sshd::hardened_ssl') == 'yes' -%> Ciphers aes256-ctr -MACs hmac-sha1 +MACs hmac-sha2-512 <% end -%> <% unless (s=scope.lookupvar('sshd::tail_additional_options')).empty? -%> -- cgit v1.2.3