From 12f6ab5e22ea8a2f7a8589dd0a386dfccc7b05a6 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sun, 7 Apr 2024 16:42:57 +0200
Subject: Removing small diffie-hellman moduli.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 debian/rules | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'debian')

diff --git a/debian/rules b/debian/rules
index 18b2bf3..9dc2801 100755
--- a/debian/rules
+++ b/debian/rules
@@ -163,6 +163,10 @@ override_dh_install-arch:
 		debian/tmp/etc/ssh/ssh_config \
 		debian/tmp/etc/ssh/sshd_config
 
+	# Remove small Diffie-Hellman moduli
+	awk '$$5 >= 4095' debian/tmp/etc/ssh/moduli > debian/tmp/etc/ssh/moduli.tmp
+	mv -f debian/tmp/etc/ssh/moduli.tmp debian/tmp/etc/ssh/moduli
+
 	dh_install -Nopenssh-client-udeb -Nopenssh-server-udeb
 ifeq ($(filter noudeb,$(DEB_BUILD_PROFILES)),)
 	dh_install -popenssh-client-udeb -popenssh-server-udeb \
-- 
cgit v1.2.3