[sshd] Disable weak algorithms. JB#48977

Disable all SHA-1 based algorithms.
sailfishos · Feb 17, 2020 · 6dc2d1a · 6dc2d1a
1 parent 9d37408
commit 6dc2d1a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/rpm/sshd_config b/rpm/sshd_config
@@ -22,6 +22,10 @@ HostKey /etc/ssh/ssh_host_ed25519_key
 # Ciphers and keying
 #RekeyLimit default none
 
+# Disable weak algorithms
+KexAlgorithms -diffie-hellman-group14-sha1
+MACs -hmac-sha1,hmac-sha1-etm@openssh.com
+
 # Logging
 #SyslogFacility AUTH
 #LogLevel INFO