Skip to content

WIP: Make sshd use secure algorithms

CleverUnderDog requested to merge CleverUnderDog/omnibus-gitlab:sshd-more-secure into master

What does this MR do?

This MR lets sshd only use "secure" algorithms for key exchange, ciphers and MACs. This shouldn't affect client connections since ssh clients should use newest version.

Checklist

See Definition of done.

  • Change added to CHANGELOG.md. Not applicable for Documentation changes and minor changes. (Is this considered a minor change?)
  • Documentation created/updated
  • Tests added - imo not requiered
  • Integration tests added to GitLab QA, if applicable
  • MR targeting master branch
  • MR has a green pipeline on GitLab.com

Reviewer Checklist

In addition to above, reviewer must:

  • Pipeline is green on dev.gitlab.org if the change is not touching documentation or internal cookbooks

References

Merge request reports