summaryrefslogtreecommitdiffstats
path: root/debian/patches
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-06 01:35:12 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-06 01:35:12 +0000
commitf049a1b64f2e423e48f371900d15dda7264ee766 (patch)
tree2394f8e1a4acef2013b33f5ad402ff91d53ad368 /debian/patches
parentSetting MACs in sshd_config to UMAC and HMAC. (diff)
downloadopenssh-f049a1b64f2e423e48f371900d15dda7264ee766.tar.xz
openssh-f049a1b64f2e423e48f371900d15dda7264ee766.zip
Setting PubkeyAcceptedKeyTypes in sshd_config to ED25519 and RSA.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian/patches')
-rw-r--r--debian/patches/progress-linux/0019-sshd_config-PubkeyAcceptedKeyTypes.patch14
-rw-r--r--debian/patches/series1
2 files changed, 15 insertions, 0 deletions
diff --git a/debian/patches/progress-linux/0019-sshd_config-PubkeyAcceptedKeyTypes.patch b/debian/patches/progress-linux/0019-sshd_config-PubkeyAcceptedKeyTypes.patch
new file mode 100644
index 0000000..9019a4f
--- /dev/null
+++ b/debian/patches/progress-linux/0019-sshd_config-PubkeyAcceptedKeyTypes.patch
@@ -0,0 +1,14 @@
+Author: Daniel Baumann <daniel.baumann@progress-linux.org>
+Description: Setting PubkeyAcceptedKeyTypes in sshd_config to ED25519 and RSA.
+
+diff -Naurp openssh.orig/sshd_config openssh/sshd_config
+--- openssh.orig/sshd_config
++++ openssh/sshd_config
+@@ -41,6 +41,7 @@ PermitRootLogin no
+ #MaxSessions 10
+
+ #PubkeyAuthentication yes
++PubkeyAcceptedKeyTypes ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256
+
+ # Expect .ssh/authorized_keys2 to be disregarded by default in future.
+ #AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2
diff --git a/debian/patches/series b/debian/patches/series
index bb700d3..02df6c8 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -52,3 +52,4 @@ progress-linux/0015-sshd_config-HostbasedAcceptedKeyTypes.patch
progress-linux/0016-sshd_config-HostKeyAlgorithms.patch
progress-linux/0017-sshd_config-KexAlgorithms.patch
progress-linux/0018-sshd_config-MACs.patch
+progress-linux/0019-sshd_config-PubkeyAcceptedKeyTypes.patch