Confirmed users
502
edits
Security/Guidelines/OpenSSH: Difference between revisions
→Modern: Fix hostkey order (521,384,256)
Gdestuynder (talk | contribs) (Undo revision 1059117 by JanZerebecki (talk) Please use the discussion tab/talk instead) |
Gdestuynder (talk | contribs) (→Modern: Fix hostkey order (521,384,256)) |
||
| Line 191: | Line 191: | ||
HashKnownHosts yes | HashKnownHosts yes | ||
# Host keys the client accepts - order here is honored by OpenSSH | # Host keys the client accepts - order here is honored by OpenSSH | ||
HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2- | HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256 | ||
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp256,ecdh-sha2-nistp384,diffie-hellman-group-exchange-sha256 | KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp256,ecdh-sha2-nistp384,diffie-hellman-group-exchange-sha256 | ||