From ac30247bf9d7ea57c01cc5ad743e2788f6e8ea0d Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Sun, 13 Feb 2011 18:42:36 -0200 Subject: Perfect forward secrecy config at squeeze template --- templates/sshd_config/Debian_squeeze.erb | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'templates') diff --git a/templates/sshd_config/Debian_squeeze.erb b/templates/sshd_config/Debian_squeeze.erb index 56b1cab..d371ed1 100644 --- a/templates/sshd_config/Debian_squeeze.erb +++ b/templates/sshd_config/Debian_squeeze.erb @@ -202,3 +202,7 @@ AllowGroups <%= sshd_allowed_groups %> <%= sshd_tail_additional_options %> <%- end %> +<%- if sshd_perfect_forward_secrecy.to_s == 'yes' then -%> +Ciphers aes256-ctr +MACs hmac-sha1 +<%- end %> -- cgit v1.2.3