2020-07-06 22:16:52 +02:00
|
|
|
#
|
2020-07-14 23:18:35 +02:00
|
|
|
# Official policy for hardened OpenSSH on Ubuntu 18.04 LTS.
|
2020-07-06 22:16:52 +02:00
|
|
|
#
|
|
|
|
|
|
2020-07-14 23:18:35 +02:00
|
|
|
client policy = true
|
2020-07-15 20:33:10 +02:00
|
|
|
name = "Hardened Ubuntu Client 18.04 LTS"
|
2020-07-06 22:16:52 +02:00
|
|
|
version = 1
|
|
|
|
|
|
|
|
|
|
# The host key types that must match exactly (order matters).
|
2020-07-14 23:18:35 +02:00
|
|
|
host keys = ssh-ed25519, ssh-ed25519-cert-v01@openssh.com, rsa-sha2-256, rsa-sha2-512, ssh-rsa-cert-v01@openssh.com
|
2020-07-06 22:16:52 +02:00
|
|
|
|
|
|
|
|
# The key exchange algorithms that must match exactly (order matters).
|
2020-07-14 23:18:35 +02:00
|
|
|
key exchanges = curve25519-sha256, curve25519-sha256@libssh.org, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha256, ext-info-c
|
2020-07-06 22:16:52 +02:00
|
|
|
|
|
|
|
|
# The ciphers that must match exactly (order matters).
|
|
|
|
|
ciphers = chacha20-poly1305@openssh.com, aes256-gcm@openssh.com, aes128-gcm@openssh.com, aes256-ctr, aes192-ctr, aes128-ctr
|
|
|
|
|
|
|
|
|
|
# The MACs that must match exactly (order matters).
|
|
|
|
|
macs = hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, umac-128-etm@openssh.com
|
