From 06ac8b6754646b9ae1ff97841ab85e457bb8ab7b Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 6 May 2024 03:33:47 +0200 Subject: Setting HostKeyAlgorithms in ssh_config to ED25519 and RSA. Signed-off-by: Daniel Baumann --- .../progress-linux/0008-ssh_config-HostKeyAlgorithms.patch | 14 ++++++++++++++ debian/patches/series | 1 + 2 files changed, 15 insertions(+) create mode 100644 debian/patches/progress-linux/0008-ssh_config-HostKeyAlgorithms.patch (limited to 'debian/patches') diff --git a/debian/patches/progress-linux/0008-ssh_config-HostKeyAlgorithms.patch b/debian/patches/progress-linux/0008-ssh_config-HostKeyAlgorithms.patch new file mode 100644 index 0000000..2acae87 --- /dev/null +++ b/debian/patches/progress-linux/0008-ssh_config-HostKeyAlgorithms.patch @@ -0,0 +1,14 @@ +Author: Daniel Baumann +Description: Setting HostKeyAlgorithms in ssh_config to ED25519 and RSA. + +diff -Naurp openssh.orig/ssh_config openssh/ssh_config +--- openssh.orig/ssh_config ++++ openssh/ssh_config +@@ -24,6 +24,7 @@ Host * + # PasswordAuthentication yes + # HostbasedAuthentication no + HostbasedKeyTypes ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256 ++ HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-256 + GSSAPIAuthentication yes + # GSSAPIDelegateCredentials no + # GSSAPIKeyExchange no diff --git a/debian/patches/series b/debian/patches/series index 3bae4ba..0766f88 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -41,3 +41,4 @@ progress-linux/0004-ssh_config-update.patch progress-linux/0005-ssh_config-CASignatureAlgorithms.patch progress-linux/0006-ssh_config-Ciphers.patch progress-linux/0007-ssh_config-HostbasedKeyTypes.patch +progress-linux/0008-ssh_config-HostKeyAlgorithms.patch -- cgit v1.2.3