From b5b679f42a3c5ed9f01b86656094bf7aff3d72bb Mon Sep 17 00:00:00 2001 From: Alexander Dietrich Date: Wed, 22 Feb 2017 16:05:59 +0100 Subject: [PATCH] Remove fallback key exchange algorithm from sshd_config --- roles/common/templates/sshd_config.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/common/templates/sshd_config.j2 b/roles/common/templates/sshd_config.j2 index fbc6df1..07e203d 100644 --- a/roles/common/templates/sshd_config.j2 +++ b/roles/common/templates/sshd_config.j2 @@ -2,7 +2,7 @@ Port 22 Protocol 2 HostKey /etc/ssh/ssh_host_ed25519_key HostKey /etc/ssh/ssh_host_rsa_key -KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256 +KexAlgorithms curve25519-sha256@libssh.org Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,umac-128@openssh.com